CVE-2011-5265 describes a Cross-Site Scripting (XSS) vulnerability in the Featurific For WordPress plugin, specifically version 1.6.2, where the 'snum' parameter in cached_image.php can be exploited to inject arbitrary web script or HTML. This vulnerability affects installations utilizing the Featurific For WordPress plugin. The vulnerability has a CVSS score of 4.3, indicating a medium severity due to its network-based attack vector and medium access complexity, with a potential impact of partial integrity compromise. While the EPSS score is low, its FAUCET Risk Score is high at 91/100, suggesting a significant risk if exploited. Currently, there is no evidence of active exploitation, and it is not listed in the CISA KEV catalog. However, exploit code is publicly available via ExploitDB, and Nuclei templates exist for detection, indicating that the vulnerability is well-understood by the security community despite minimal social media or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.6.2CPE matchmatch criteria | cpe:2.3:a:featurific_for_wordpress_project:featurific-for-wordpress:1.6.2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.