CVE-2011-4735: XSS
Multiple cross-site scripting (XSS) vulnerabilities in the Control Panel in Parallels Plesk Panel 10.2.0 build 20110407.20 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/user/create and certain other files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4735?
CVE-2011-4735 has been classified as a moderate severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2011-4735?
To fix CVE-2011-4735, ensure you are using a patched version of Parallels Plesk Panel that addresses the identified cross-site scripting vulnerabilities.
What are the consequences of exploiting CVE-2011-4735?
Exploiting CVE-2011-4735 can allow attackers to inject arbitrary HTML or web scripts, potentially leading to unauthorized access or data theft.
Which versions of Parallels Plesk Panel are affected by CVE-2011-4735?
CVE-2011-4735 affects Parallels Plesk Panel version 10.2.0 build 20110407.20.
Can CVE-2011-4735 be exploited remotely?
Yes, CVE-2011-4735 can be exploited remotely, allowing attackers to execute cross-site scripting attacks from external locations.