XSS in Simplerealtytheme Advanced Text Widget Plugin
CVE-2011-4618
Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.101 (95.1th percentile) — read the EPSS interpretation.
Affected products
- Simplerealtytheme Advanced_text_widget_plugin
- Wordpress
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vdb-entry, x_refsource_XF)
- secalert@redhat.com (mailing-list, x_refsource_MLIST)
- secalert@redhat.com (mailing-list, Exploit, x_refsource_BUGTRAQ)
- secalert@redhat.com (Exploit, vdb-entry, x_refsource_BID)
- secalert@redhat.com (mailing-list, Exploit, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2011-4618?
- CVE-2011-4618 is a vulnerability in Simplerealtytheme Advanced Text Widget Plugin, classified under Cross-site Scripting. Published 2013-01-24.
- Is CVE-2011-4618 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.