CVSS 3.0
6.1 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2011-4955
Medium (6.1) in bsuite project bsuite. EPSS 1.8% chance of exploitation in the next 30 days.
Multiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) p parameters to index.php.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bsuite_project:bsuite
References
- http://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611
- http://secunia.com/advisories/45234
- http://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407
- http://www.openwall.com/lists/oss-security/2012/04/16/3
- http://www.openwall.com/lists/oss-security/2012/04/16/8