cbcvebase.
CVE-2011-5207
published 2012-10-04

CVE-2011-5207: Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote…

PriorityP424medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EXPLOIT
EPSS
4.54%
90.4th percentile
Cross-site scripting (XSS) vulnerability in admin/OptionsPostsList.php in the TheCartPress plugin for WordPress before 1.1.6 before 2011-12-31 allows remote attackers to inject arbitrary web script or HTML via the tcp_name_post_XXXXX parameter.

Affected

17 ranges
VendorProductVersion rangeFixed in
thecartpressthecartpress<= 1.1.6—
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
thecartpressthecartpress——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.