Unscored severity · published Jan 25, 2011
CVE-2011-0641
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Statpresscn · Heart5
1.9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0641
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0641
osvdb.org
http://osvdb.org/70595
Vendor Advisory
http://secunia.com/advisories/43016
www.securityfocus.com
http://www.securityfocus.com/bid/45950
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/64882
More from Statpresscn
7.1
CVE-2025-23544
WordPress StatPressCN plugin <= 1.9.1 - Reflected Cross Site Scripting (XSS) vulnerability