CVE-2011-3978
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow...
CVE-2011-3978 is a low vulnerability (CVSS 3.5) in Lightneasy, published October 4, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.55%, the 75th percentile. No source names a fixed version.
- Severity
- 3.5 LowCVSS 2.0, NVD
- Exploit chance
- 1.55%EPSS, 75th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.
- Record
CVE-2011-3978- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE ListNo score
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.
- Record
CVE-2011-3978- Updated
- 2026-11-02
EUVDEUVD-2011-3931No score
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.
- Record
EUVD-2011-3931- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3v87-f22j-hcwvNo score
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow...
Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy.php in LightNEasy 3.2.4 allow remote authenticated users to inject arbitrary web script or HTML via the (1) commentemail, (2) commentmessage, or (3) commentname parameter in a sendcomment action for the news page.
- Record
GHSA-3v87-f22j-hcwv- Weakness
- CWE-79
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/archive/1/519571/100/0/threaded
rul3z.de/advisories/SSCHADV2011-013.txt
securityreason.com/securityalert/8407
secunia.com/advisories/45955
lightneasy.org/punbb/viewtopic.php?id=1464
osvdb.org/75262
exchange.xforce.ibmcloud.com/vulnerabilities/69737
nvd.nist.gov/vuln/detail/CVE-2011-3978
github.com/advisories/GHSA-3v87-f22j-hcwv