VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 28, 2011· Updated Apr 29, 2026

CVE-2011-3851

CVE-2011-3851

Description

Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cpage parameter.

Affected products

1
  • Devpress/News
    cpe:2.3:a:devpress:news:*:*:*:*:*:*:*:*
    Range: <=0.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.