Cross-site Scripting Vulnerability in Pretty Link Lite Plugin for WordPress
CVE-2011-5192

Currently unrated

Key Information:

Vendor

Wordpress
Status
Pretty Link Lite Plugin
Vendor
CVE Published:
23 September 2012

What is CVE-2011-5192?

The Pretty Link Lite plugin for WordPress is susceptible to a Cross-site Scripting (XSS) vulnerability found in the pretty-bar.php file. This vulnerability allows remote attackers to inject malicious web scripts or HTML through the slug parameter. Attackers exploiting this weakness could manipulate users' interactions with the website, potentially leading to data theft or unauthorized actions within the WordPress site.

References

http://plugins.trac.wordpress.org/changeset/485819/pretty...
x_refsource_CONFIRM
http://wordpress.org/extend/plugins/pretty-link/changelog/
x_refsource_CONFIRM
http://secunia.com/advisories/47456
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.