cve/cves/2011/CVE-2011-5182.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

920 B

Raw Permalink Blame History

CVE-2011-5182

Description

Cross-site scripting (XSS) vulnerability in lanoba-social-plugin/index.php in the Lanoba Social plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor disputes this issue, stating "Lanoba's plug in does sanitize user input, and because that input is never sent to the browser, an attacker has no way of executing script or code on a user's behalf.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/36326

920 B Raw Permalink Blame History