CVE-2011-5104

Опубликовано: 23 авг. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:getshopped:wp_e-commerce:*:*:*:*:*:*:*:*

Версия до 3.8.7.1 (включая)

cpe:2.3:a:getshopped:wp_e-commerce:3.6.5:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.6:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.7:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.8:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.9:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.10:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.11:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.12:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.6.13:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7:beta2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7:beta3:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.3:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.4:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:beta1:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:beta2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc1:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc3:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc4:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.1:beta:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.2:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.3:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc1:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc3:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc4:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.2:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.3:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.4:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.5:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.6:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.7:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.9:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.7:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.2:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.3:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta1:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta3:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:rc1:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:rc2:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:rc3:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8:rc4:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.2:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.3:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.4:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.5:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.6:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.6.1:*:*:*:*:*:*:*

cpe:2.3:a:getshopped:wp_e-commerce:3.8.7:*:*:*:*:*:*:*

cpe:2.3:a:wordpress:wordpress:-:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00431

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5wj8-82fg-f5qg

github

около 3 лет назад