What is CVE-2011-5128?

CVE-2011-5128 is a vulnerability in Bueltge Adminimize, classified under Cross-site Scripting. Published 2012-08-29.

Is CVE-2011-5128 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Bueltge Adminimize

CVE-2011-5128

Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) inc-options/deinstall_options.php, (2) inc-options/theme_options.php, or (3) inc-options/im_export_options.php, or the (4) post or (5) post_ID parameters to adminimize.php, different vectors than CVE-2011-4926.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.017 (74.2th percentile) — read the EPSS interpretation.

Affected products

Bueltge Adminimize — versions 0.6.9, 0.7, 0.7.1
Wordpress
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2011-5128?: CVE-2011-5128 is a vulnerability in Bueltge Adminimize, classified under Cross-site Scripting. Published 2012-08-29.
Is CVE-2011-5128 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.