CVEvulnerability
CVE-2011-5191
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5192.
Affected configurations
• blairwilliams pretty link lite plugin (<= 1.5.2)
• blairwilliams pretty link lite plugin 1.4.12
• blairwilliams pretty link lite plugin 1.4.13
• blairwilliams pretty link lite plugin 1.4.14
• blairwilliams pretty link lite plugin 1.4.15
• blairwilliams pretty link lite plugin 1.4.16
• blairwilliams pretty link lite plugin 1.4.17
• blairwilliams pretty link lite plugin 1.4.18
• blairwilliams pretty link lite plugin 1.4.19
• blairwilliams pretty link lite plugin 1.4.20
• blairwilliams pretty link lite plugin 1.4.21
• blairwilliams pretty link lite plugin 1.4.22
• blairwilliams pretty link lite plugin 1.4.23
• blairwilliams pretty link lite plugin 1.4.24
• blairwilliams pretty link lite plugin 1.4.25
• blairwilliams pretty link lite plugin 1.4.26
• blairwilliams pretty link lite plugin 1.4.27
• blairwilliams pretty link lite plugin 1.4.28
• blairwilliams pretty link lite plugin 1.4.29
• blairwilliams pretty link lite plugin 1.4.30
• blairwilliams pretty link lite plugin 1.4.31
• blairwilliams pretty link lite plugin 1.4.32
• blairwilliams pretty link lite plugin 1.4.33
• blairwilliams pretty link lite plugin 1.4.34
• blairwilliams pretty link lite plugin 1.4.35
• blairwilliams pretty link lite plugin 1.4.36
• blairwilliams pretty link lite plugin 1.4.38
• blairwilliams pretty link lite plugin 1.4.39
• blairwilliams pretty link lite plugin 1.4.41
• blairwilliams pretty link lite plugin 1.4.42
• blairwilliams pretty link lite plugin 1.4.43
• blairwilliams pretty link lite plugin 1.4.44
• blairwilliams pretty link lite plugin 1.4.45
• blairwilliams pretty link lite plugin 1.4.46
• blairwilliams pretty link lite plugin 1.4.47
• blairwilliams pretty link lite plugin 1.4.48
• blairwilliams pretty link lite plugin 1.4.49
• blairwilliams pretty link lite plugin 1.4.50
• blairwilliams pretty link lite plugin 1.4.51
• blairwilliams pretty link lite plugin 1.4.52
• blairwilliams pretty link lite plugin 1.4.53
• blairwilliams pretty link lite plugin 1.4.55
• blairwilliams pretty link lite plugin 1.4.56
• blairwilliams pretty link lite plugin 1.5.0
• blairwilliams pretty link lite plugin 1.5.1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://plugins.trac.wordpress.org/changeset/473693/pretty-link Exploit, Patch
- http://wordpress.org/extend/plugins/pretty-link/changelog/ Vendor Advisory
- http://plugins.trac.wordpress.org/changeset/473693/pretty-link Exploit, Patch
- http://wordpress.org/extend/plugins/pretty-link/changelog/ Vendor Advisory