4.3

CVE-2011-5192

Exploit

Pretty Link Lite < 1.5.6 - Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in pretty-bar.php in Pretty Link Lite plugin before 1.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the slug parameter, a different vulnerability than CVE-2011-5191.
Mögliche Gegenmaßnahme
Pretty Link Lite: Update to version 1.5.6, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blairwilliams ≫ Pretty Link Lite Plugin Version <= 1.5.5
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.12
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.13
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.14
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.15
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.16
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.17
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.18
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.19
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.20
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.21
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.22
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.23
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.24
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.25
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.26
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.27
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.28
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.29
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.30
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.31
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.32
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.33
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.34
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.35
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.36
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.38
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.39
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.41
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.42
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.43
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.44
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.45
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.46
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.47
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.48
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.49
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.50
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.51
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.52
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.53
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.55
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.4.56
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.5.0
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.5.1
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.5.2
   Wordpress ≫ Wordpress Version -
Blairwilliams ≫ Pretty Link Lite Plugin Version 1.5.4
   Wordpress ≫ Wordpress Version -
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Pretty Link Lite
Version [*, 1.5.6)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.06% 0.788
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://wordpress.org/extend/plugins/pretty-link/changelog/
Vendor Advisory
http://plugins.trac.wordpress.org/changeset/485819/pretty-link
Patch
Exploit
http://secunia.com/advisories/47456
Vendor Advisory
http://www.securityfocus.com/bid/51306
https://www.wordfence.com/threat-intel/vulnerabilities/id/ed766000-557b-483b-9b86-c1cc6898abb7
Third Party Advisory