CVE-2011-5257

Multiple cross-site scripting (XSS) vulnerabilities in the Classipress theme before 3.1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) twitter_id parameter related to the Twitter widget and (2) facebook_id parameter related to the Facebook widget.

• CWE-79

• http://docs.appthemes.com/classipress/classipress-version-3-1-5/Vendor Advisory
• http://secunia.com/advisories/46658Vendor Advisory
• http://www.exploit-db.com/exploits/18053Exploit
• http://www.osvdb.org/76712
• http://docs.appthemes.com/classipress/classipress-version-3-1-5/Vendor Advisory
• http://secunia.com/advisories/46658Vendor Advisory
• http://www.exploit-db.com/exploits/18053Exploit
• http://www.osvdb.org/76712

Published

Feb 12, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-5251Open redirect vulnerability in forum/login.php in vBulletin …
• CVE-2011-5252Open redirect vulnerability in Users/Account/LogOff in Orcha…
• CVE-2011-5253Dl Download Ticket Service 0.3 through 0.9 allows remote att…
• CVE-2011-5254Unspecified vulnerability in the Connections plugin before 0…
• CVE-2011-5255Multiple cross-site scripting (XSS) vulnerabilities in admin…
• CVE-2011-5256Cross-site scripting (XSS) vulnerability in the tooltips in …
• CVE-2011-5258Multiple cross-site scripting (XSS) vulnerabilities in Orang…
• CVE-2011-5259SQL injection vulnerability in lib/controllers/CentralContro…
• CVE-2011-5260Cross-site scripting (XSS) vulnerability in SAP/BW/DOC/METAD…
• CVE-2011-5261Cross-site scripting (XSS) vulnerability in serverreport.cgi…
• CVE-2011-5262SQL injection vulnerability in prodpage.cfm in SonicWALL Ave…
• CVE-2011-5263Cross-site scripting (XSS) vulnerability in RetrieveMailExam…