CVE-2011-4616
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl...
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
CVE-2011-4616- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
CVE-2011-4616- Updated
- 2026-11-02
EUVDEUVD-2011-4540 No score
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
EUVD-2011-4540- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4w9w-9h3m-mg43 No score
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl...
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
GHSA-4w9w-9h3m-mg43- Weakness
- CWE-79
- Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
CVE-2011-4616- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-4616 No score
Cross-site scripting (XSS) vulnerability in the HTML-Template-Pro module before 0.9507 for Perl allows remote attackers to inject arbitrary web script or HTML via template parameters, related to improper handling of > (greater than) and < (less than) characters.
- Record
DEBIAN-CVE-2011-4616- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libhtml-template-pro-perlDebian:12 |
before 0.9507-1 | 0.9507-1 |
libhtml-template-pro-perlDebian:13 |
before 0.9507-1 | 0.9507-1 |
libhtml-template-pro-perlDebian:14 |
before 0.9507-1 | 0.9507-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-4616 is a medium vulnerability (CVSS 4.3) in Igor Vlasenko Html-template-pro, published January 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.62%, the 76th percentile. Fixed in libhtml-template-pro-perl 0.9507-1.
References
cpansearch.perl.org/src/VIY/HTML-Template-Pro-0.9507/Changes
securityfocus.com/bid/51117
lists.fedoraproject.org/pipermail/package-announce/2012-October/089889.html
openwall.com/lists/oss-security/2011/12/19/1