Lucene search

K
cve[email protected]CVE-2011-5180
HistorySep 20, 2012 - 10:55 a.m.

CVE-2011-5180

2012-09-2010:55:25
CWE-79
web.nvd.nist.gov
22
security
vulnerability
xss
cve-2011-5180
zooeffect plugin
wordpress

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

Cross-site scripting (XSS) vulnerability in wp-1pluginjquery.php in the ZooEffect plugin 1.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: some of these details are obtained from third party information. NOTE: this has been disputed by a third party.

Affected configurations

NVD
Node
zooeffectzooeffect1.01
AND
wordpresswordpressMatch-
CPENameOperatorVersion
zooeffect:zooeffectzooeffecteq*

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

Related for CVE-2011-5180