CVE-2011-3865

2022-10-0316:15:05

mitre

www.cve.org

cross-site scripting

black-letterhead theme

wordpress

remote attackers

web script

html

path_info

index.php

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.0%

JSON

Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.

References

sitewat.ch/en/Advisories/24