Unrated severityNVD Advisory· Published Feb 12, 2013· Updated Jun 16, 2026
CVE-2011-5257
CVE-2011-5257
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) twitter_id parameter related to the Twitter widget and (2) facebook_id parameter related to the Facebook widget.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:appthemes:classipress:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:appthemes:classipress:*:*:*:*:*:*:*:*range: <=3.1.4
- cpe:2.3:a:appthemes:classipress:3.0.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.0.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.1.5:*:*:*:*:*:*:*
- (no CPE)range: <3.1.5
Patches
Vulnerability mechanics
References
4- www.exploit-db.com/exploits/18053nvdExploit
- docs.appthemes.com/classipress/classipress-version-3-1-5/nvdVendor Advisory
- secunia.com/advisories/46658nvdVendor Advisory
- www.osvdb.org/76712nvd
News mentions
0No linked articles in our index yet.