Unrated severityNVD Advisory· Published Feb 12, 2013· Updated Apr 29, 2026
CVE-2011-5257
CVE-2011-5257
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) twitter_id parameter related to the Twitter widget and (2) facebook_id parameter related to the Facebook widget.
Affected products
5cpe:2.3:a:appthemes:classipress:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:appthemes:classipress:*:*:*:*:*:*:*:*range: <=3.1.4
- cpe:2.3:a:appthemes:classipress:3.0.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.0.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:appthemes:classipress:3.1.5:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/18053nvdExploit
- docs.appthemes.com/classipress/classipress-version-3-1-5/nvdVendor Advisory
- secunia.com/advisories/46658nvdVendor Advisory
- www.osvdb.org/76712nvd
News mentions
0No linked articles in our index yet.