CVE-2011-3385 Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors,....
MediumCVSS 4.3
EPSS 0.85%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in WebsiteBaker before 2.8, as used in LEPTON and possibly other products, allows remote attackers to inject arbitrary web script or HTML via unknown vectors, a different vulnerability than CVE-2006-2307.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lepton-cms lepton | All versions | No fix listed |
| websitebaker2 websitebaker | <= 2.7 | No fix listed |
| websitebaker2 websitebaker | = 2.6.7 | No fix listed |
References
- JVN#02134508 third-party-advisory
- JVNDB-2011-000067 third-party-advisory