CVE-2011-3860

Published: Sep 28, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Affected (21)

Products: Onedesigns: Cover Wp

Onedesigns

1 product

Cover Wp

Configuration A

21 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Onedesigns Cover Wp	Up to 1.6.5
Onedesigns Cover Wp	Version 1.1
Onedesigns Cover Wp	Version 1.2
Onedesigns Cover Wp	Version 1.3
Onedesigns Cover Wp	Version 1.4.1
Onedesigns Cover Wp	Version 1.4
Onedesigns Cover Wp	Version 1.5.1
Onedesigns Cover Wp	Version 1.5.2
Onedesigns Cover Wp	Version 1.5.3
Onedesigns Cover Wp	Version 1.5.4
Onedesigns Cover Wp	Version 1.5.5
Onedesigns Cover Wp	Version 1.5.6
Onedesigns Cover Wp	Version 1.5.7
Onedesigns Cover Wp	Version 1.5.8
Onedesigns Cover Wp	Version 1.5.9
Onedesigns Cover Wp	Version 1.5
Onedesigns Cover Wp	Version 1.6.1
Onedesigns Cover Wp	Version 1.6.2
Onedesigns Cover Wp	Version 1.6.3
Onedesigns Cover Wp	Version 1.6.4
Onedesigns Cover Wp	Version 1.6