CVE-2011-5191: XSS
Published Sep 23, 2012
·Updated
Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192.
Affected Software
46 affected components
Blairwilliams Pretty Link Lite Plugin<=1.5.2
Blairwilliams Pretty Link Lite Plugin=1.4.12
Blairwilliams Pretty Link Lite Plugin=1.4.13
Blairwilliams Pretty Link Lite Plugin=1.4.14
Blairwilliams Pretty Link Lite Plugin=1.4.15
Blairwilliams Pretty Link Lite Plugin=1.4.16
Blairwilliams Pretty Link Lite Plugin=1.4.17
Blairwilliams Pretty Link Lite Plugin=1.4.18
Blairwilliams Pretty Link Lite Plugin=1.4.19
Blairwilliams Pretty Link Lite Plugin=1.4.20
Blairwilliams Pretty Link Lite Plugin=1.4.21
Blairwilliams Pretty Link Lite Plugin=1.4.22
Blairwilliams Pretty Link Lite Plugin=1.4.23
Blairwilliams Pretty Link Lite Plugin=1.4.24
Blairwilliams Pretty Link Lite Plugin=1.4.25
Blairwilliams Pretty Link Lite Plugin=1.4.26
Blairwilliams Pretty Link Lite Plugin=1.4.27
Blairwilliams Pretty Link Lite Plugin=1.4.28
Blairwilliams Pretty Link Lite Plugin=1.4.29
Blairwilliams Pretty Link Lite Plugin=1.4.30
Blairwilliams Pretty Link Lite Plugin=1.4.31
Blairwilliams Pretty Link Lite Plugin=1.4.32
Blairwilliams Pretty Link Lite Plugin=1.4.33
Blairwilliams Pretty Link Lite Plugin=1.4.34
Blairwilliams Pretty Link Lite Plugin=1.4.35
Blairwilliams Pretty Link Lite Plugin=1.4.36
Blairwilliams Pretty Link Lite Plugin=1.4.38
Blairwilliams Pretty Link Lite Plugin=1.4.39
Blairwilliams Pretty Link Lite Plugin=1.4.41
Blairwilliams Pretty Link Lite Plugin=1.4.42
Blairwilliams Pretty Link Lite Plugin=1.4.43
Blairwilliams Pretty Link Lite Plugin=1.4.44
Blairwilliams Pretty Link Lite Plugin=1.4.45
Blairwilliams Pretty Link Lite Plugin=1.4.46
Blairwilliams Pretty Link Lite Plugin=1.4.47
Blairwilliams Pretty Link Lite Plugin=1.4.48
Blairwilliams Pretty Link Lite Plugin=1.4.49
Blairwilliams Pretty Link Lite Plugin=1.4.50
Blairwilliams Pretty Link Lite Plugin=1.4.51
Blairwilliams Pretty Link Lite Plugin=1.4.52
Blairwilliams Pretty Link Lite Plugin=1.4.53
Blairwilliams Pretty Link Lite Plugin=1.4.55
Blairwilliams Pretty Link Lite Plugin=1.4.56
Blairwilliams Pretty Link Lite Plugin=1.5.0
Blairwilliams Pretty Link Lite Plugin=1.5.1
WordPress WordPress
Remediation
Event History
Sep 23, 2012
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
05:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-5191?
CVE-2011-5191 has a moderate severity due to its ability to allow cross-site scripting (XSS) attacks.
2
How do I fix CVE-2011-5191?
To fix CVE-2011-5191, update the Pretty Link Lite plugin to version 1.5.4 or later.
3
What are the implications of CVE-2011-5191?
CVE-2011-5191 allows remote attackers to inject arbitrary scripts, potentially leading to unauthorized access or data theft.
4
Which versions of the Pretty Link Lite plugin are affected by CVE-2011-5191?
CVE-2011-5191 affects all versions of the Pretty Link Lite plugin before 1.5.4.
5
Is CVE-2011-5191 specific to WordPress?
Yes, CVE-2011-5191 is a vulnerability that affects the Pretty Link Lite plugin used within WordPress.