CVE-2011-5182

no score yetEPSS 3.6%

Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor disputes this issue, stating "Lanoba's plug in does sanitize user input, and because that input is never sent to the browser, an attacker has no way of executing script or code on a user's behalf.

EPSS: 3.6% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-09-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

wordpress:lanoba_social_plugin

References

http://www.securityfocus.com/archive/1/520574/100/0/threaded
http://www.securityfocus.com/archive/1/520678/100/0/threaded
http://www.securityfocus.com/bid/50746
https://exchange.xforce.ibmcloud.com/vulnerabilities/71411
https://wordpress.org/support/topic/plugin-lanoba-social-plugin-xss-vulnerabilities

Check your stack JSON