{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-12-19T00:00:00", "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field)."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "47954", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47954"}, {"name": "51997", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/51997"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982"}, {"name": "s2memberpro-couponcode-xss(73202)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73202"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-5082", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field)."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "47954", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/47954"}, {"name": "51997", "refsource": "BID", "url": "http://www.securityfocus.com/bid/51997"}, {"name": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982", "refsource": "CONFIRM", "url": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982"}, {"name": "s2memberpro-couponcode-xss(73202)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73202"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T00:23:39.997Z"}, "title": "CVE Program Container", "references": [{"name": "47954", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/47954"}, {"name": "51997", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/51997"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982"}, {"name": "s2memberpro-couponcode-xss(73202)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73202"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-5082", "datePublished": "2012-03-19T18:00:00", "dateReserved": "2012-03-19T00:00:00", "dateUpdated": "2024-08-07T00:23:39.997Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:s2member:s2member:*:*:*:*:*:*:*:*", "matchCriteriaId": "20021B45-AD41-4B1D-8E84-44B103320F17", "versionEndIncluding": "111216", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110604:*:*:*:*:*:*:*", "matchCriteriaId": "5BFF79F7-F654-49A9-B69E-752A9D8DFA7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110605:*:*:*:*:*:*:*", "matchCriteriaId": "2ED9EA4D-5856-4095-9ED9-B7CDADC6967E", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110606:*:*:*:*:*:*:*", "matchCriteriaId": "59859517-9DB4-4405-8BD4-B42323FC4C27", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110617:*:*:*:*:*:*:*", "matchCriteriaId": "C769BF57-CB2D-4966-AAAC-DA0C664915B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110620:*:*:*:*:*:*:*", "matchCriteriaId": "0D106D3F-23AF-47DB-94AD-49A5E680AEAB", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110708:*:*:*:*:*:*:*", "matchCriteriaId": "E28E883F-FDCB-47BA-8EF2-A79CA2DBADDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110709:*:*:*:*:*:*:*", "matchCriteriaId": "2E729373-1CAE-4922-B914-64876B3FD48A", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110710:*:*:*:*:*:*:*", "matchCriteriaId": "71B5C3CB-8947-4AEF-B087-82504C705FBE", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110731:*:*:*:*:*:*:*", "matchCriteriaId": "BB117913-C718-4873-AE14-275A2CBDF726", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110812:*:*:*:*:*:*:*", "matchCriteriaId": "DB340368-2695-40B2-9368-03AE37604D5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110815:*:*:*:*:*:*:*", "matchCriteriaId": "E3E8B7FB-FDA8-4927-B7FD-A0BE0C4DC870", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110912:*:*:*:*:*:*:*", "matchCriteriaId": "EE4A4D89-3ED4-4F86-8D36-B344C1141352", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110913:*:*:*:*:*:*:*", "matchCriteriaId": "3D772ECD-4735-4E02-8992-F167BF5ACDC4", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110915:*:*:*:*:*:*:*", "matchCriteriaId": "D6AA8153-2E2B-4538-8B3B-903BCE2835EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110926:*:*:*:*:*:*:*", "matchCriteriaId": "F7E727F7-67AF-4A6E-AF7F-A4484AB752BC", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:110927:*:*:*:*:*:*:*", "matchCriteriaId": "560EE288-4417-4786-9F1C-1BB37CC2F59B", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111002:*:*:*:*:*:*:*", "matchCriteriaId": "B6BE6290-8342-4D36-8D5B-EB9DD703BADE", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111003:*:*:*:*:*:*:*", "matchCriteriaId": "2E7BF27C-5C2C-4881-A96E-4D81E2F508A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111011:*:*:*:*:*:*:*", "matchCriteriaId": "499132F6-D1F5-44F3-A187-2EE21A06BB4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111017:*:*:*:*:*:*:*", "matchCriteriaId": "66C01499-DD84-47D0-ADF8-DE47C7B79E23", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111029:*:*:*:*:*:*:*", "matchCriteriaId": "607F39F8-DAF0-4E33-AFED-71C397678B8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111105:*:*:*:*:*:*:*", "matchCriteriaId": "A7FE84FC-3CB4-4006-9EC3-88545FA07D66", "vulnerable": true}, {"criteria": "cpe:2.3:a:s2member:s2member:111206:*:*:*:*:*:*:*", "matchCriteriaId": "459E6DC6-67D7-4254-ADCC-90A0E5C05979", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*", "matchCriteriaId": "847DA578-4655-477E-8A6F-99FBE738E4F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field)."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n de comandos en sitios cruzados (XSS) en el plugin de WordPress 's2Member Pro' antes de v111220 permite a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s del par\u00e1metro s2member_pro_authnet_checkout [coupon](tambi\u00e9n conocido como C\u00f3digo de cup\u00f3n)."}], "id": "CVE-2011-5082", "lastModified": "2025-04-11T00:51:21.963", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2012-03-19T18:55:02.453", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47954"}, {"source": "cve@mitre.org", "url": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/51997"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73202"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47954"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.primothemes.com/forums/viewtopic.php?f=4&t=16173#p56982"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/51997"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73202"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}