Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-4926

medium · 4.3

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.

4.3
CVSS
10.9%
EPSS (exploit prob.)
96th
EPSS percentile
2012-08-29
Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

VendorProductAffected versions
bueltgeadminimize<= 1.7.21
bueltgeadminimize0.6.9
bueltgeadminimize0.7
bueltgeadminimize0.7.1
bueltgeadminimize0.7.2
bueltgeadminimize0.7.3
bueltgeadminimize0.7.5
bueltgeadminimize0.7.6
bueltgeadminimize0.7.7
bueltgeadminimize0.7.8
bueltgeadminimize0.7.9
bueltgeadminimize0.8
bueltgeadminimize0.8.1
bueltgeadminimize1.0
bueltgeadminimize1.1
bueltgeadminimize1.2
bueltgeadminimize1.3
bueltgeadminimize1.4
bueltgeadminimize1.4.1
bueltgeadminimize1.4.2
bueltgeadminimize1.4.3-6
bueltgeadminimize1.4.7
bueltgeadminimize1.5
bueltgeadminimize1.5.1
bueltgeadminimize1.5.2
bueltgeadminimize1.5.3-8
bueltgeadminimize1.6.1
bueltgeadminimize1.6.3
bueltgeadminimize1.6.4
bueltgeadminimize1.6.5
bueltgeadminimize1.6.6-7
bueltgeadminimize1.6.8
bueltgeadminimize1.6.9
bueltgeadminimize1.7
bueltgeadminimize1.7.1
bueltgeadminimize1.7.2
bueltgeadminimize1.7.3
bueltgeadminimize1.7.4
bueltgeadminimize1.7.5
bueltgeadminimize1.7.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-4926