Lucene search
HistorySep 28, 2011 - 10:55 a.m.
CVE-2011-3862
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Affected configurations
Node
adazingmorning_coffeeRange≤3.5
ORadazingmorning_coffeeMatch2.7
ORadazingmorning_coffeeMatch2.8
ORadazingmorning_coffeeMatch2.9
ORadazingmorning_coffeeMatch3.0
ORadazingmorning_coffeeMatch3.1
ORadazingmorning_coffeeMatch3.2
ORadazingmorning_coffeeMatch3.4
wordpresswordpress
Related
prion
prion
Cross site scripting
2011-09-28 10:55:00
patchstack
patchstack
WordPress Morning Coffee Theme 3.5 - Cross Site Scripting
2011-09-30 00:00:00
cvelist
cvelist
CVE-2011-3862
2011-09-28 10:00:00
wpvulndb
wpvulndb
Morning Coffee < 3.6 - XSS
2011-09-27 00:00:00
cve
cve
CVE-2011-3862
2011-09-28 10:55:04
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.9%
Related for NVD:CVE-2011-3862