Unrated severityNVD Advisory· Published Sep 23, 2012· Updated Jun 16, 2026

CVE-2011-5194

Description

Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Phpace/Samswhois2 versions
cpe:2.3:a:phpace:samswhois:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:phpace:samswhois:*:*:*:*:*:*:*:*range: <=1.4.2.3
- cpe:2.3:a:phpace:samswhois:1.1:*:*:*:*:*:*:*
WordPress/Whois Searchllm-fuzzy
Range: <1.4.2.3

Patches

Vulnerability mechanics

References

packetstormsecurity.org/files/view/108271/wpwhois-xss.txtnvdExploit
plugins.trac.wordpress.org/changeset/482954/wordpress-whois-searchnvdExploitPatch
www.securityfocus.com/bid/51244nvdExploit
secunia.com/advisories/47428nvdVendor Advisory
wordpress.org/extend/plugins/wordpress-whois-search/changelog/nvd
exchange.xforce.ibmcloud.com/vulnerabilities/72074nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000