CVE-2011-5194

MEDIUM 4.3CVE-2011-5194 · Published 23/09/2012 · updated 16/06/2026

In short

CVE-2011-5194 is a MEDIUM (CVSS 4.3) vulnerability affecting samswhois (phpace).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
samswhois phpace	`= 1.1≤ 1.4.2.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in vendors/samswhois/samswhois.inc.php in the Whois Search plugin before 1.4.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the domain parameter, a different vulnerability than CVE-2011-5193.

References

packetstormsecurity.org/files/view/108271/wpwhois-xss.txt · Exploit
plugins.trac.wordpress.org/changeset/482954/wordpress-whois-search · Exploit
secunia.com/advisories/47428 · Vendor Advisory
wordpress.org/extend/plugins/wordpress-whois-search/changelog
securityfocus.com/bid/51244 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/72074

More vulnerabilities in samswhois

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free