Skip to content

CVE-2011-3850 Atahualpa < 3.6.8 - Cross-Site Scripting

MediumCVSS 4.3 EPSS 4.3% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

Affected products

ProductAffected versionsFixed in
bytesforall atahualpa <= 3.6.7 No fix listed
bytesforall atahualpa = 2.0 No fix listed
bytesforall atahualpa = 2.01 No fix listed
bytesforall atahualpa = 2.2 No fix listed
bytesforall atahualpa = 2.21 No fix listed
bytesforall atahualpa = 3.1 No fix listed
bytesforall atahualpa = 3.1.1 No fix listed
bytesforall atahualpa = 3.1.2 No fix listed
bytesforall atahualpa = 3.1.3 No fix listed
bytesforall atahualpa = 3.1.4 No fix listed
bytesforall atahualpa = 3.1.5 No fix listed
bytesforall atahualpa = 3.1.6 No fix listed
bytesforall atahualpa = 3.1.8 No fix listed
bytesforall atahualpa = 3.1.9 No fix listed
bytesforall atahualpa = 3.2 No fix listed
bytesforall atahualpa = 3.4 No fix listed
bytesforall atahualpa = 3.4.1 No fix listed
bytesforall atahualpa = 3.4.01 No fix listed
bytesforall atahualpa = 3.4.3 No fix listed
bytesforall atahualpa = 3.4.4 No fix listed
bytesforall atahualpa = 3.4.5 No fix listed
bytesforall atahualpa = 3.4.6 No fix listed
bytesforall atahualpa = 3.4.9 No fix listed
bytesforall atahualpa = 3.5.2 No fix listed
bytesforall atahualpa = 3.5.4 No fix listed
Show 7 more
ProductAffected versionsFixed in
bytesforall atahualpa = 3.6 No fix listed
bytesforall atahualpa = 3.6.1 No fix listed
bytesforall atahualpa = 3.6.2 No fix listed
bytesforall atahualpa = 3.6.3 No fix listed
bytesforall atahualpa = 3.6.4 No fix listed
bytesforall atahualpa = 3.6.6 No fix listed
wordpress atahualpa(WordPress) < 3.6.8 3.6.8

References