CVE

CVE-2011-5191 — PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2011-5191 PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.4 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 1.5.4 1.5.4 2011-12-12

CVE-2011-5191

The Pretty Link plugin for WordPress versions prior to 1.5.4 contained a cross-site scripting flaw in the pretty-bar.php file where the slug parameter failed to properly sanitize user input, enabling attackers to inject malicious scripts or HTML code.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.