CVE-2011-5176

2012-09-1517:00:00

mitre

www.cve.org

cross-site scripting

remote injection

web script

html

search feature

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

49.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in search.php in Banana Dance, possibly B.1.5 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) q or (2) category parameter.

References

www.bananadance.org/Program-News/Minor-Update-and-New-Theme

www.doyoubananadance.com/Program-News/Important-Notice-About-SQLi-Exploit