Description
Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.
Unscored
CVE-2011-3851
EUVD-2011-3808GHSA-f85q-8pgw-28cc
Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script …
Published Sep 28, 2011 · Updated Sep 17, 2024 · Assigned by mitre