CVE-2011-5107
MEDIUM
4.3
CVSS 2.0
Description
Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter.
Affected products and versions
- n/a n/a — Versions not specified
References
- www.securityfocus.com http://www.securityfocus.com/archive/1/520590/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/50743 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/71413
- nvd.nist.gov Official NVD record