Now officially on WordPress.org

CVE Database / CVE-2011-5192

CVE

CVE-2011-5192 — PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.6

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2011-5192 PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links [pretty-link] < 1.5.6 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Unknown < 1.5.6 1.5.6 2012-01-06 —

CVE-2011-5192

The Pretty Link Lite plugin before version 1.5.6 contained a cross-site scripting vulnerability in the pretty-bar.php file that allowed attackers to execute arbitrary JavaScript or inject malicious HTML through the slug parameter. This particular XSS flaw was distinct from a separate vulnerability identified as CVE-2011-5191 in the same plugin. The issue was resolved in version 1.5.6 and later releases.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings