First published: Fri Dec 16 2011(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Parallels Parallels Plesk Small Business Panel | =10.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-4764 is classified as a high severity vulnerability due to the potential for remote code execution via cross-site scripting.
To mitigate CVE-2011-4764, updating the Parallels Plesk Small Business Panel to a version that addresses these XSS vulnerabilities is recommended.
CVE-2011-4764 can be exploited to perform cross-site scripting attacks, allowing the injection of arbitrary web scripts.
CVE-2011-4764 specifically affects the Parallels Plesk Small Business Panel version 10.2.0.
Detailed information on CVE-2011-4764 can be found in various security reports and advisories relevant to the vulnerability.