{"api_version":"1","generated_at":"2026-07-23T09:26:15+00:00","cve":"CVE-2011-3850","urls":{"html":"https://cve.report/CVE-2011-3850","api":"https://cve.report/api/cve/CVE-2011-3850.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-3850","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-3850"},"summary":{"title":"CVE-2011-3850","description":"Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-09-28 10:55:03","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/46297","name":"http://secunia.com/advisories/46297","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress Atahualpa Theme \"s\" Cross-Site Scripting Vulnerability - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://sitewat.ch/en/Advisories/8","name":"https://sitewat.ch/en/Advisories/8","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","URL Repurposed"],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://wpvulndb.com/vulnerabilities/9788","name":"https://wpvulndb.com/vulnerabilities/9788","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Atahualpa < 3.6.8 - XSS","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3850","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3850","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"2.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"2.21","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.8","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.1.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.4.9","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.5.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"3.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"1","versionEndIncluding":"3.6.7","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bytesforall","cpe5":"atahualpa","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3850","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:46:03.221Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"46297","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/46297"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://sitewat.ch/en/Advisories/8"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://wpvulndb.com/vulnerabilities/9788"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-09-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2019-09-19T04:06:09.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"46297","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/46297"},{"tags":["x_refsource_MISC"],"url":"https://sitewat.ch/en/Advisories/8"},{"tags":["x_refsource_MISC"],"url":"https://wpvulndb.com/vulnerabilities/9788"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-3850","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"46297","refsource":"SECUNIA","url":"http://secunia.com/advisories/46297"},{"name":"https://sitewat.ch/en/Advisories/8","refsource":"MISC","url":"https://sitewat.ch/en/Advisories/8"},{"name":"https://wpvulndb.com/vulnerabilities/9788","refsource":"MISC","url":"https://wpvulndb.com/vulnerabilities/9788"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-3850","datePublished":"2011-09-28T10:00:00.000Z","dateReserved":"2011-09-27T00:00:00.000Z","dateUpdated":"2024-08-06T23:46:03.221Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-09-28 10:55:03","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:*:*:*:*:*:*:*:*","versionEndIncluding":"3.6.7","matchCriteriaId":"488B9614-9FC5-4CFF-AEC2-4355BBEF4F64"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:2.0:*:*:*:*:*:*:*","matchCriteriaId":"5FDD9C54-F366-49F2-A878-548961B26497"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:2.01:*:*:*:*:*:*:*","matchCriteriaId":"CC3F95B8-9B22-424E-BE99-FCD12798A8BA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:2.2:*:*:*:*:*:*:*","matchCriteriaId":"A96E0B2F-AE23-4EAE-A996-33D1A35FE2CE"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:2.21:*:*:*:*:*:*:*","matchCriteriaId":"2514E232-9F82-4CD4-988D-C4D568F1BBAB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1:*:*:*:*:*:*:*","matchCriteriaId":"63689ACF-F72F-466F-AA9A-59504F3AE3F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"08EABA3E-BEF6-41FA-A97A-418A88918F9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A4A6F42A-A8F8-444C-BBFD-79F2BC39E6A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"24FF4D07-2B1E-41DB-9CF8-BA2154BF4B4C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.4:*:*:*:*:*:*:*","matchCriteriaId":"5660F954-07B6-437C-AE28-A6B36FF967BF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2FC88F03-FD6E-4C10-B0EF-604DCC7C33D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.6:*:*:*:*:*:*:*","matchCriteriaId":"22F0549C-A1AC-41FD-B25E-87E396C3E63F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.8:*:*:*:*:*:*:*","matchCriteriaId":"F499BF53-9E42-486D-9B8B-33B9C9615A78"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.1.9:*:*:*:*:*:*:*","matchCriteriaId":"A1E4D178-E105-4AD0-98F6-44AF92835C14"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.2:*:*:*:*:*:*:*","matchCriteriaId":"A5F42DF2-3DA5-4BD6-B42B-156DDD4F2307"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4:*:*:*:*:*:*:*","matchCriteriaId":"FA6E4661-9CF9-42FD-93A2-0BE78F09C2CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.1:*:*:*:*:*:*:*","matchCriteriaId":"824A69F6-C4F0-4D20-905B-39941506116D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.01:*:*:*:*:*:*:*","matchCriteriaId":"6D8C9AA7-38A6-425C-A802-0B1A804020CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.3:*:*:*:*:*:*:*","matchCriteriaId":"D1F84B47-7F55-4D89-B03C-10A5B14A6DB3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.4:*:*:*:*:*:*:*","matchCriteriaId":"BA51228D-0F10-438F-A2EC-0B6A9C9563CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.5:*:*:*:*:*:*:*","matchCriteriaId":"EEC6615B-928B-43D4-AB86-52D28405A744"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.6:*:*:*:*:*:*:*","matchCriteriaId":"CABF03DD-992D-4D34-A552-D481410BC975"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.4.9:*:*:*:*:*:*:*","matchCriteriaId":"EEDE02FD-A310-4B81-8D0F-66F6C4FF987D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.5.2:*:*:*:*:*:*:*","matchCriteriaId":"856780F1-54A8-4F58-92B0-970CCA7E7D79"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A616072D-BE97-4D37-BCC8-DAF28F8FB572"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6:*:*:*:*:*:*:*","matchCriteriaId":"A6587B52-DF5A-4F74-B489-99B8081A8B42"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6.1:*:*:*:*:*:*:*","matchCriteriaId":"4E2D9781-C0F6-4AC4-833A-767C1A709A7F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6.2:*:*:*:*:*:*:*","matchCriteriaId":"61B496F7-1237-4AF6-A330-6E17BC4C3D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6.3:*:*:*:*:*:*:*","matchCriteriaId":"C393F16A-6BBD-43CF-844C-2ABB7A5C704C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6.4:*:*:*:*:*:*:*","matchCriteriaId":"A0F500F4-C1A1-4DFA-8A41-DE0E1C6106F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bytesforall:atahualpa:3.6.6:*:*:*:*:*:*:*","matchCriteriaId":"38E6C2BF-4A45-429F-BEB8-74510EF4E42B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","matchCriteriaId":"847DA578-4655-477E-8A6F-99FBE738E4F9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"3850","Ordinal":"1","Title":"CVE-2011-3850","CVE":"CVE-2011-3850","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"3850","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.","Type":"Description","Title":"CVE-2011-3850"},{"CveYear":"2011","CveId":"3850","Ordinal":"2","NoteData":"2011-09-28","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"3850","Ordinal":"3","NoteData":"2019-09-19","Type":"Other","Title":"Modified"}]}}}