Unscored severity · published Sep 2, 2011
CVE-2011-3385
Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LE
Lepton · Lepton-cms
All versions, or not specified · source: NVD
WE
Websitebaker · Websitebaker2
through 2.7; 2.6.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3385
jvn.jp
http://jvn.jp/en/jp/JVN02134508/index.html
jvndb.jvn.jp
http://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000067.html
More from Lepton
–
CVE-2012-1000
Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1)…
–
CVE-2012-0999
SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter
–
CVE-2012-0998
Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a