CVE-2011-1150

MediumCVSS 6.1/10Last modified Jun 16, 2026

Description

bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
bbPressbbPressthrough 1.0.2

References

Timeline

Published
Feb 5, 2020
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-11519.1Joomla! 1.6.0 is vulnerable to SQL Injection via the filter_order and filer_order_Dir parameters.CVE-2011-11537.5Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to CVE-2011-11546.9The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands CVE-2011-11551.9The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause a denial of service (CVE-2011-11565.0feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of serviCVE-2011-11574.3Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 alCVE-2011-11584.3Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 alCVE-2011-11592.1acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any dCVE-2011-11602.1The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local uCVE-2011-11622.1The tpm_read function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previCVE-2011-11632.1The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid number of partitionsCVE-2011-11644.6Vino before 2.99.4 can connect external networks contrary to the statement in the vino-preferences dialog box, which might make it easier fo
CVE-2011-1150: Medium severity, CVSS 6.1 | Vulnix