CVE-2011-5082

Опубликовано: 19 мар. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:s2member:s2member:*:*:*:*:*:*:*:*

Версия до 111216 (включая)

cpe:2.3:a:s2member:s2member:110604:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110605:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110606:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110617:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110620:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110708:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110709:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110710:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110731:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110812:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110815:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110912:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110913:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110915:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110926:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:110927:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111002:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111003:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111011:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111017:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111029:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111105:*:*:*:*:*:*:*

cpe:2.3:a:s2member:s2member:111206:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00253

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-2gph-8pg4-626q

github

около 3 лет назад