Unscored severity · published Sep 28, 2011
CVE-2011-3852
Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter
–
CVSS
3.4%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Evolve · Theme4press
through 1.2.5; 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; +21 more · source: NVD