Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 12:45 a.m.•23 views

CVE-2011-3859

Cross-site scripting XSS vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

4.3CVSS6AI score0.03429EPSS
SaveExploits2References1
NVD
NVD
•added 2011/09/28 10:55 a.m.•22 views

CVE-2011-3859

Cross-site scripting XSS vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

4.3CVSS5.8AI score0.03429EPSS
SaveExploits2References1
Prion
Prion
•added 2011/09/28 10:55 a.m.•30 views

Cross site scripting

Cross-site scripting XSS vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

4.3CVSS6.2AI score0.03429EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2011/09/28 10:00 a.m.•60 views

CVE-2011-3859

CVE-2011-3859 concerns the WordPress Trending theme prior to version 0.2, where the cpage parameter is susceptible to cross-site scripting (XSS). Exploitation could allow remote attackers to inject arbitrary script or HTML in the context of the affected site. Several connected sources corroborate...

4.3CVSS6AI score0.03429EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2011/09/28 10:00 a.m.•40 views

CVE-2011-3859

Cross-site scripting XSS vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

5.8AI score0.03429EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/09/28 12:00 a.m.•5 views

CVE-2011-3859: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter...

4.3CVSS6AI score0.03429EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2011/09/28 12:00 a.m.•18 views

PT-2011-4735 · WordPress · Trending Theme

Name of the Vulnerable Software and Affected Versions: Trending theme for WordPress versions prior to 0.2 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the cpage parameter, which can lead to cross-site scripting XSS attacks. Recommendations: For version...

4.3CVSS5.6AI score0.03429EPSS
SaveExploits2References4
Exploit DB
Exploit DB
•added 2011/09/24 12:00 a.m.•29 views

WordPress Theme Trending 0.1 - 'cpage' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49896/info The Trending theme for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

4.3CVSS5.2AI score0.03429EPSS
SaveExploits2
Patchstack
Patchstack
•added 2011/09/24 12:00 a.m.•28 views

WordPress Trending Theme 0.1 - Cross-Site Scripting

WordPress Trending theme's "cpage" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

4.3CVSS3.2AI score0.03429EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder