Cross site scripting

2012-09-2317:55:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.5%

JSON

Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192.

CPENameOperatorVersion
pretty_link_lite_pluginle1.5.2
pretty_link_lite_plugineq1.4.12
pretty_link_lite_plugineq1.4.13
pretty_link_lite_plugineq1.4.14
pretty_link_lite_plugineq1.4.15
pretty_link_lite_plugineq1.4.16
pretty_link_lite_plugineq1.4.17
pretty_link_lite_plugineq1.4.18
pretty_link_lite_plugineq1.4.19
pretty_link_lite_plugineq1.4.20

Name	Operator	Version
pretty_link_lite_plugin	le	1.5.2
pretty_link_lite_plugin	eq	1.4.12
pretty_link_lite_plugin	eq	1.4.13
pretty_link_lite_plugin	eq	1.4.14
pretty_link_lite_plugin	eq	1.4.15
pretty_link_lite_plugin	eq	1.4.16
pretty_link_lite_plugin	eq	1.4.17
pretty_link_lite_plugin	eq	1.4.18
pretty_link_lite_plugin	eq	1.4.19
pretty_link_lite_plugin	eq	1.4.20