Multiple cross-site scripting (XSS) vulnerabilities in the Adminimize plugin before 1.7.22 for WordPress allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) inc-options/deinstall_options.php, (2) inc-options/theme_options.php, or (3) inc-options/im_export_options.php, or the (4) post or (5) post_ID parameters to adminimize.php, different vectors than CVE-2011-4926.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2012-08-29T01:00:00Z

Updated: 2024-09-16T16:59:06.713Z

Reserved: 2012-08-28T00:00:00Z

Link: CVE-2011-5128

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2012-08-29T04:39:40.800

Modified: 2023-11-07T02:09:49.303

Link: CVE-2011-5128

cve-icon Redhat

No data.