CVE-2011-0641

MEDIUM 4.3CVE-2011-0641 · Published 25/01/2011 · updated 16/06/2026

In short

CVE-2011-0641 is a MEDIUM (CVSS 4.3) vulnerability affecting statpresscn (heart5).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 79.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
statpresscn heart5	`= 1.9.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/admin.php in the StatPressCN plugin 1.9.0 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) what1, (2) what2, (3) what3, (4) what4, and (5) what5 parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

References

osvdb.org/70595
secunia.com/advisories/43016 · Vendor Advisory
securityfocus.com/bid/45950
exchange.xforce.ibmcloud.com/vulnerabilities/64882

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free