Vulnerability Details : CVE-2011-5128
Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) inc-options/deinstall_options.php, (2) inc-options/theme_options.php, or (3) inc-options/im_export_options.php, or the (4) post or (5) post_ID parameters to adminimize.php, different vectors than CVE-2011-4926.
Vulnerability category: Cross site scripting (XSS)
Exploit prediction scoring system (EPSS) score for CVE-2011-5128
Probability of exploitation activity in the next 30 days: 0.11%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 43 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-5128
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST |
CWE ids for CVE-2011-5128
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-5128
-
http://plugins.trac.wordpress.org/changeset?reponame=&new=467338@adminimize&old=466900@adminimize#file5
Diff [466900:467338] for adminimize – WordPress Plugin RepositoryExploit;Patch
-
http://wordpress.org/extend/plugins/adminimize/changelog/
Adminimize – WordPress plugin | WordPress.orgPatch
Products affected by CVE-2011-5128
- cpe:2.3:a:bueltge:adminimize:*:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.20:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.19:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.12:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.11:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.4.3-6:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.8:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.16:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.15:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.14:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.13:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.6-7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.18:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.17:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.10:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.5.3-8:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:bueltge:adminimize:0.6.9:*:*:*:*:*:*:*