ByteOS Network

NVD Vulnerability Details :

CVE-2011-5104

Deferred

Source-cve@mitre.org

Published At-23 Aug, 2012 | 20:55

Updated At-11 Apr, 2025 | 00:51

Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

getshopped>>wp_e-commerce>>Versions up to 3.8.7.1(inclusive)

cpe:2.3:a:getshopped:wp_e-commerce:*:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.5

cpe:2.3:a:getshopped:wp_e-commerce:3.6.5:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.6

cpe:2.3:a:getshopped:wp_e-commerce:3.6.6:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.7

cpe:2.3:a:getshopped:wp_e-commerce:3.6.7:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.8

cpe:2.3:a:getshopped:wp_e-commerce:3.6.8:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.9

cpe:2.3:a:getshopped:wp_e-commerce:3.6.9:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.10

cpe:2.3:a:getshopped:wp_e-commerce:3.6.10:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.11

cpe:2.3:a:getshopped:wp_e-commerce:3.6.11:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.12

cpe:2.3:a:getshopped:wp_e-commerce:3.6.12:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.6.13

cpe:2.3:a:getshopped:wp_e-commerce:3.6.13:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7

cpe:2.3:a:getshopped:wp_e-commerce:3.7:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7

cpe:2.3:a:getshopped:wp_e-commerce:3.7:beta2:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7

cpe:2.3:a:getshopped:wp_e-commerce:3.7:beta3:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.1

cpe:2.3:a:getshopped:wp_e-commerce:3.7.1:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.2

cpe:2.3:a:getshopped:wp_e-commerce:3.7.2:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.3

cpe:2.3:a:getshopped:wp_e-commerce:3.7.3:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.4

cpe:2.3:a:getshopped:wp_e-commerce:3.7.4:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:beta1:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:beta2:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc1:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc2:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc3:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5:rc4:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5.1

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.1:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5.1

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.1:beta:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5.2

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.2:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.5.3

cpe:2.3:a:getshopped:wp_e-commerce:3.7.5.3:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc1:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc2:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc3:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6:rc4:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.1

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.1:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.2

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.2:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.3

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.3:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.4

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.4:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.5

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.5:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.6

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.6:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.7

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.7:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.6.9

cpe:2.3:a:getshopped:wp_e-commerce:3.7.6.9:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.7

cpe:2.3:a:getshopped:wp_e-commerce:3.7.7:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.8

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.8.1

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.1:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.8.2

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.2:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.7.8.3

cpe:2.3:a:getshopped:wp_e-commerce:3.7.8.3:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.8

cpe:2.3:a:getshopped:wp_e-commerce:3.8:*:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.8

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta1:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.8

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta2:*:*:*:*:*:*

getshopped>>wp_e-commerce>>3.8

cpe:2.3:a:getshopped:wp_e-commerce:3.8:beta3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/77249	cve@mitre.org	N/A
http://plugins.trac.wordpress.org/changeset?reponame=&new=463447%40wp-e-commerce&old=463446%40wp-e-commerce	cve@mitre.org	Exploit Patch
http://secunia.com/advisories/46957	cve@mitre.org	Vendor Advisory
http://wordpress.org/extend/plugins/wp-e-commerce/changelog/	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/50757	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71443	cve@mitre.org	N/A
http://osvdb.org/77249	af854a3a-2127-422b-91ae-364da2661108	N/A
http://plugins.trac.wordpress.org/changeset?reponame=&new=463447%40wp-e-commerce&old=463446%40wp-e-commerce	af854a3a-2127-422b-91ae-364da2661108	Exploit Patch
http://secunia.com/advisories/46957	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://wordpress.org/extend/plugins/wp-e-commerce/changelog/	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/50757	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/71443	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History