Vulnerability Description
Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Skysa | Skysa App Bar Integration Plugin | <= 1.03 |
| Wordpress | Wordpress | - |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/archive/1/520662/100/0/threaded
- http://www.securityfocus.com/bid/50824Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71486
- http://www.securityfocus.com/archive/1/520662/100/0/threaded
- http://www.securityfocus.com/bid/50824Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71486
FAQ
What is CVE-2011-5179?
CVE-2011-5179 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or ...
How severe is CVE-2011-5179?
CVE-2011-5179 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-5179?
Check the references section above for vendor advisories and patch information. Affected products include: Skysa Skysa App Bar Integration Plugin, Wordpress Wordpress.