CVE-2011-3854

Published: Sep 28, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Affected (25)

Products: Quirm: Zenlite

Quirm

1 product

Zenlite

Configuration A

25 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Quirm Zenlite	Up to 4.3
Quirm Zenlite	Version 1.0
Quirm Zenlite	Version 1.1
Quirm Zenlite	Version 1.2
Quirm Zenlite	Version 1.3
Quirm Zenlite	Version 2.0
Quirm Zenlite	Version 2.1
Quirm Zenlite	Version 2.2
Quirm Zenlite	Version 2.4
Quirm Zenlite	Version 2.5
Quirm Zenlite	Version 2.6
Quirm Zenlite	Version 2.7
Quirm Zenlite	Version 3.0
Quirm Zenlite	Version 3.1
Quirm Zenlite	Version 3.2
Quirm Zenlite	Version 3.3
Quirm Zenlite	Version 3.4
Quirm Zenlite	Version 3.51
Quirm Zenlite	Version 3.52
Quirm Zenlite	Version 3.5
Quirm Zenlite	Version 3.60
Quirm Zenlite	Version 3.61
Quirm Zenlite	Version 4.0
Quirm Zenlite	Version 4.1
Quirm Zenlite	Version 4.2