CVE-2011-5264

MEDIO 4.3CVE-2011-5264 · Published 12/02/2013 · updated 16/06/2026

In breve

CVE-2011-5264 è una vulnerabilità MEDIO (CVSS 4.3) che riguarda lazyest-backup (marcel brinkkemper).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
lazyest-backup marcel_brinkkemper	`= 0.1.0= 0.2.0≤ 0.2.1`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in lazyest-backup.php in the Lazyest Backup plugin before 0.2.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xml_or_all parameter.

References

plugins.trac.wordpress.org/changeset · Exploit
secunia.com/advisories/47092 · Vendor Advisory
wordpress.org/extend/plugins/lazyest-backup/changelog · Patch
osvdb.org/77493
securityfocus.com/bid/50900
exchange.xforce.ibmcloud.com/vulnerabilities/71650

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free