NVD Vulnerability Detail

CVE-2011-4955

Summary	Multiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5 alpha 3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) s or (2) p parameters to index.php.
Publication Date	Dec. 21, 2017, 7:29 a.m.
Registration Date	Jan. 28, 2021, 4:40 p.m.
Last Update	Nov. 21, 2024, 10:33 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:bsuite_project:bsuite::::::wordpress::*		4.0.7
cpe:2.3:a:bsuite_project:bsuite:5.0:a2::::wordpress::*

Related information, measures and tools

No	URL	タグ
1	http://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611	Broken Link
2	http://secunia.com/advisories/45234	Permissions Required
3	http://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407	Third Party Advisory
4	http://www.openwall.com/lists/oss-security/2012/04/16/3	Mailing List Third Party Advisory
5	http://www.openwall.com/lists/oss-security/2012/04/16/8	Mailing List Third Party Advisory
6	https://exchange.xforce.ibmcloud.com/vulnerabilities/68602	Third Party Advisory VDB Entry
7	http://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611	Broken Link
8	https://exchange.xforce.ibmcloud.com/vulnerabilities/68602	Third Party Advisory VDB Entry
9	http://www.openwall.com/lists/oss-security/2012/04/16/8	Mailing List Third Party Advisory
10	http://www.openwall.com/lists/oss-security/2012/04/16/3	Mailing List Third Party Advisory
11	http://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407	Third Party Advisory
12	http://secunia.com/advisories/45234	Permissions Required

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-79	クロスサイト・スクリプティング（XSS）	https://cwe.mitre.org/data/definitions/79.html

JVN Vulnerability Information

WordPress 用 bSuite プラグインにおけるクロスサイトスクリプティングの脆弱性

Title	WordPress 用 bSuite プラグインにおけるクロスサイトスクリプティングの脆弱性
Summary	WordPress 用 bSuite プラグインには、クロスサイトスクリプティングの脆弱性が存在します。
Possible impacts	情報を取得される、および情報を改ざんされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Dec. 23, 2011, midnight
Registration Date	Jan. 23, 2018, 10:09 a.m.
Last Update	Jan. 23, 2018, 10:09 a.m.

Affected System

Casey Bisson

bSuite 5 alpha 3 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-4955	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4955
National Vulnerability Database (NVD)
2	CVE-2011-4955	https://nvd.nist.gov/vuln/detail/CVE-2011-4955

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-79	https://jvndb.jvn.jp/ja/cwe/CWE-79.html

ベンダー情報

No	Name	URL
WordPress Plugin Changeset
1	Changeset 520611 for bsuite	https://plugins.trac.wordpress.org/changeset?old_path=%2Fbsuite&old=520611&new_path=%2Fbsuite&new=520611
WordPress Plugin Directory
2	bSuite	https://wordpress.org/plugins/bsuite/
WordPress Support Plugins
3	[Plugin: bSuite] XSS security vulnerability in 407	https://wordpress.org/support/topic/plugin-bsuite-xss-security-vulnerability-in-407/

Change Log

No	Changed Details	Date of change
0	[2018年01月23日] 掲載	Feb. 17, 2018, 10:37 a.m.