{"api_version":"1","generated_at":"2026-07-23T06:31:40+00:00","cve":"CVE-2011-4616","urls":{"html":"https://cve.report/CVE-2011-4616","api":"https://cve.report/api/cve/CVE-2011-4616.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-4616","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-4616"},"summary":{"title":"CVE-2011-4616","description":"Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.","state":"PUBLISHED","assigner":"redhat","published_at":"2012-01-06 04:01:26","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-79","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://openwall.com/lists/oss-security/2011/12/19/1","name":"http://openwall.com/lists/oss-security/2011/12/19/1","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"oss-security - CVE for HTML-Template-Pro 0.9506 XSS","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 18 Update: perl-HTML-Template-Pro-0.9509-1.fc18","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/51117","name":"http://www.securityfocus.com/bid/51117","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Perl HTML::Template::Pro Module Cross Site Scripting Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507","name":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Search the CPAN - metacpan.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 17 Update: perl-HTML-Template-Pro-0.9509-1.fc17","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes","name":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"404"},{"url":"http://secunia.com/advisories/47184","name":"http://secunia.com/advisories/47184","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA47184 - HTML::Template::Pro Template Parameters Cross-Site Scripting Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"#652587 - libhtml-template-pro-perl: [CVE-2011-4616] missing escaping allows XSS - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[SECURITY] Fedora 16 Update: perl-HTML-Template-Pro-0.9509-1.fc16","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4616","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4616","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.01","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.17","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.26","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.34","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.35","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.36","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.37","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.38","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.40","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.41","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.42","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.43","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.44","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.45","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.47","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.48","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.52","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.53","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.54","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.55","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.56","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.57","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.58","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.59","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.61","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.62","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.63","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.64","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.65","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.66","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.67","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.68","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.69","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.70","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.71","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.72","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.73","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.74","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.75","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.76","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.77","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.80","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.81","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.82","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.83","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.84","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.85","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.86","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.87","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.90","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.92","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.93","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.94","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.95","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.9501","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.9502","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.9503","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.9504","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"0.9505","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"4616","vulnerable":"1","versionEndIncluding":"0.9506","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"igor_vlasenko","cpe5":"html-template-pro","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T00:09:19.327Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes"},{"name":"51117","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/51117"},{"name":"FEDORA-2012-15482","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html"},{"name":"FEDORA-2012-15490","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html"},{"name":"FEDORA-2012-15439","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html"},{"name":"[oss-security] 20111218 CVE for HTML-Template-Pro 0.9506 XSS","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://openwall.com/lists/oss-security/2011/12/19/1"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587"},{"name":"47184","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/47184"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-12-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2013-02-14T10:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes"},{"name":"51117","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/51117"},{"name":"FEDORA-2012-15482","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html"},{"name":"FEDORA-2012-15490","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html"},{"name":"FEDORA-2012-15439","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html"},{"name":"[oss-security] 20111218 CVE for HTML-Template-Pro 0.9506 XSS","tags":["mailing-list","x_refsource_MLIST"],"url":"http://openwall.com/lists/oss-security/2011/12/19/1"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587"},{"name":"47184","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/47184"},{"tags":["x_refsource_CONFIRM"],"url":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert@redhat.com","ID":"CVE-2011-4616","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes","refsource":"CONFIRM","url":"http://cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes"},{"name":"51117","refsource":"BID","url":"http://www.securityfocus.com/bid/51117"},{"name":"FEDORA-2012-15482","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html"},{"name":"FEDORA-2012-15490","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089888.html"},{"name":"FEDORA-2012-15439","refsource":"FEDORA","url":"http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089603.html"},{"name":"[oss-security] 20111218 CVE for HTML-Template-Pro 0.9506 XSS","refsource":"MLIST","url":"http://openwall.com/lists/oss-security/2011/12/19/1"},{"name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587","refsource":"CONFIRM","url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652587"},{"name":"47184","refsource":"SECUNIA","url":"http://secunia.com/advisories/47184"},{"name":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507","refsource":"CONFIRM","url":"http://metacpan.org/diff/release/VIY/HTML-Template-Pro-0.9505/VIY/HTML-Template-Pro-0.9507"}]}}}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-4616","datePublished":"2012-01-06T02:00:00.000Z","dateReserved":"2011-11-29T00:00:00.000Z","dateUpdated":"2024-08-07T00:09:19.327Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-01-06 04:01:26","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-79","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9506","matchCriteriaId":"81B1E7F0-FE0B-4D92-B40E-3E872CA5C42E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.01:*:*:*:*:*:*:*","matchCriteriaId":"D1CD158E-274C-420D-898B-F9CC70C8CA41"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.17:*:*:*:*:*:*:*","matchCriteriaId":"EA820865-D87E-4CD3-8F83-FE90D64A57BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.26:*:*:*:*:*:*:*","matchCriteriaId":"1833C0A5-DC98-4E1D-8CA9-A3EFB5915F07"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.34:*:*:*:*:*:*:*","matchCriteriaId":"FEA1D7B9-DDF3-482A-AC1F-2876E4D736CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.35:*:*:*:*:*:*:*","matchCriteriaId":"01093EFF-B2E4-4F1E-B96D-F450483AD024"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.36:*:*:*:*:*:*:*","matchCriteriaId":"2E6E1EB7-0248-4EA0-AA93-8A1A602AA774"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.37:*:*:*:*:*:*:*","matchCriteriaId":"65ED0DB5-F2E7-4AD1-8BB3-EBD0EA4F7AA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.38:*:*:*:*:*:*:*","matchCriteriaId":"C6745E05-ACD3-4314-BF62-FD727FA85173"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.40:*:*:*:*:*:*:*","matchCriteriaId":"0BD73986-314A-4843-A330-83BEC354BEFE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.41:*:*:*:*:*:*:*","matchCriteriaId":"685F1623-7C91-4B8B-A09F-793BD09AD69B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.42:*:*:*:*:*:*:*","matchCriteriaId":"30A1B1EF-FB21-455D-B579-3007F271ED8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.43:*:*:*:*:*:*:*","matchCriteriaId":"8203EEF8-2B0D-41C3-BE95-49EF1585A79E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.44:*:*:*:*:*:*:*","matchCriteriaId":"E40E636C-77F4-4921-A9B9-27698A7DCA2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.45:*:*:*:*:*:*:*","matchCriteriaId":"450C79FF-67E6-4AB7-84BE-B565DA4A3176"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.47:*:*:*:*:*:*:*","matchCriteriaId":"7FD0D6FD-1696-40EC-9F55-EE1B3F92373A"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.48:*:*:*:*:*:*:*","matchCriteriaId":"4BDD26AF-2661-42AE-B2A5-75C8D76E731C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.50:*:*:*:*:*:*:*","matchCriteriaId":"E20E2D3F-E5AE-4041-AB40-243A75626FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.51:*:*:*:*:*:*:*","matchCriteriaId":"E1032632-2A79-4525-AD54-289AE7F253B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.52:*:*:*:*:*:*:*","matchCriteriaId":"2D0ECBC7-CF35-4657-8BFB-79CCF62C7691"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.53:*:*:*:*:*:*:*","matchCriteriaId":"CDE2C32D-52D4-4DBE-838F-E9CEE7FA8CF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.54:*:*:*:*:*:*:*","matchCriteriaId":"9FA4702C-7DB0-4948-9082-91790DE859DE"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.55:*:*:*:*:*:*:*","matchCriteriaId":"0ADDC952-3B10-428A-82B5-D10AFE5F97B7"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.56:*:*:*:*:*:*:*","matchCriteriaId":"9F5E8035-C5F9-495D-AF39-694C3EAD5008"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.57:*:*:*:*:*:*:*","matchCriteriaId":"B8E54C1F-DBBF-40CA-A4B2-4EB16B60928D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.58:*:*:*:*:*:*:*","matchCriteriaId":"666479C5-E7F9-4117-BBB4-7ADE9874EE69"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.59:*:*:*:*:*:*:*","matchCriteriaId":"FFDBC525-C06F-402F-8E04-30AC1F1C5741"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.61:*:*:*:*:*:*:*","matchCriteriaId":"474DA826-37E9-4B53-81F0-CAC36C03AAED"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.62:*:*:*:*:*:*:*","matchCriteriaId":"78C7144C-C310-46D2-97DD-B8D5E2201A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.63:*:*:*:*:*:*:*","matchCriteriaId":"0FB8F70F-08DC-43D6-AF72-0E4AC07EBAA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.64:*:*:*:*:*:*:*","matchCriteriaId":"1A3BC438-61B5-434A-8461-842C024AF06D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.65:*:*:*:*:*:*:*","matchCriteriaId":"7989F339-467D-47BA-9E05-3741A60ADC46"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.66:*:*:*:*:*:*:*","matchCriteriaId":"5CC51B72-EAB3-404A-952F-85657336213C"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.67:*:*:*:*:*:*:*","matchCriteriaId":"56FAD6BB-B165-4B27-A5E4-BEA09F414278"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.68:*:*:*:*:*:*:*","matchCriteriaId":"809FA422-C5E7-4107-A2BA-E2A388166F2F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.69:*:*:*:*:*:*:*","matchCriteriaId":"0DE45E38-EE33-4B81-BF17-4338029FFDA8"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.70:*:*:*:*:*:*:*","matchCriteriaId":"0C69E447-8F8C-464B-9DE7-F785AA70ABC1"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.71:*:*:*:*:*:*:*","matchCriteriaId":"F262C32F-9740-40B6-9A9B-16C1F1D1A065"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.72:*:*:*:*:*:*:*","matchCriteriaId":"B9966C9A-A674-4B9D-8285-A1CACE90F0E3"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.73:*:*:*:*:*:*:*","matchCriteriaId":"7AEAAE04-F3A4-4CEF-9AF2-0CD3A47F0F13"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.74:*:*:*:*:*:*:*","matchCriteriaId":"1DD97525-FEC1-43C9-A056-6BDE8EC975AB"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.75:*:*:*:*:*:*:*","matchCriteriaId":"159E9B66-47CF-4848-93B1-B5C43869934B"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.76:*:*:*:*:*:*:*","matchCriteriaId":"5F246C1D-D0E7-42EC-8109-514B17240788"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.77:*:*:*:*:*:*:*","matchCriteriaId":"E9785D98-5DB4-4585-A3BB-666B01A19163"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.80:*:*:*:*:*:*:*","matchCriteriaId":"5619C91B-6205-4172-BEF1-349E0F332256"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.81:*:*:*:*:*:*:*","matchCriteriaId":"142F26B5-5CB1-49BB-A469-7922B6C75D3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.82:*:*:*:*:*:*:*","matchCriteriaId":"89D67852-8115-4C22-983C-C036DC2EAB04"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.83:*:*:*:*:*:*:*","matchCriteriaId":"D0FB16FF-26CC-43C4-9BFD-7728758016D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.84:*:*:*:*:*:*:*","matchCriteriaId":"B1886C07-3519-4E83-928D-7FE1BBDC93F2"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.85:*:*:*:*:*:*:*","matchCriteriaId":"A2A63A02-7D30-47C6-B095-DE437D50A9BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.86:*:*:*:*:*:*:*","matchCriteriaId":"16A618A5-54F2-4E36-B10B-3200D6BAFCDA"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.87:*:*:*:*:*:*:*","matchCriteriaId":"D1AE3D87-7B0D-4EBE-9528-C8791537657F"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.90:*:*:*:*:*:*:*","matchCriteriaId":"96EF9ACF-04EE-48AC-BDC2-4521C5A15805"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.92:*:*:*:*:*:*:*","matchCriteriaId":"F2855786-1E0A-4E6C-8949-E0BEF11E64F3"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.93:*:*:*:*:*:*:*","matchCriteriaId":"439B1BB3-6CDB-481A-A9D0-4385302C65E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.94:*:*:*:*:*:*:*","matchCriteriaId":"743B82BB-C027-4438-A153-BAB63007B0AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.95:*:*:*:*:*:*:*","matchCriteriaId":"B97E94C2-9E56-4095-9B19-7708706B5900"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.9501:*:*:*:*:*:*:*","matchCriteriaId":"0F17ABA4-AE7F-473C-9113-C7A9A5FD4AC7"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.9502:*:*:*:*:*:*:*","matchCriteriaId":"78C69AD8-6B9C-44AB-9217-08864BF7C92D"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.9503:*:*:*:*:*:*:*","matchCriteriaId":"4B606904-F051-46A7-BDD5-389E9AA62EB5"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.9504:*:*:*:*:*:*:*","matchCriteriaId":"FFAAC825-832C-49EF-933E-D6E4870D0BE6"},{"vulnerable":true,"criteria":"cpe:2.3:a:igor_vlasenko:html-template-pro:0.9505:*:*:*:*:*:*:*","matchCriteriaId":"B3AD5EE4-5D44-48C2-AA73-CCFD7E317328"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"4616","Ordinal":"1","Title":"CVE-2011-4616","CVE":"CVE-2011-4616","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"4616","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.","Type":"Description","Title":"CVE-2011-4616"},{"CveYear":"2011","CveId":"4616","Ordinal":"2","NoteData":"2012-01-05","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"4616","Ordinal":"3","NoteData":"2013-02-14","Type":"Other","Title":"Modified"}]}}}