Cross-Site Scripting Vulnerability in bbPress by Automattic
CVE-2011-1150

6.1MEDIUM

Key Information:

Vendor

Bbpress

Status
Bbpress
Vendor
CVE Published:
5 February 2020

What is CVE-2011-1150?

bbPress versions through 1.0.2 contain a Cross-Site Scripting vulnerability located in the /bb-login.php file, specifically through the 're' parameter, allowing attackers to inject malicious scripts. This issue can lead to unauthorized access to user sessions and compromise site security.

Affected Version(s)

bbPress through 1.0.2

References

https://www.openwall.com/lists/oss-security/2011/03/14/20
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.