CVE-2006-1263

2006-03-1902:02:00

[email protected]

web.nvd.nist.gov

nvd

cve-2006-1263

cross-site scripting

xss

wordpress

vulnerabilities

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%

JSON

Multiple “unannounced” cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Affected configurations

NVD

Node

wordpresswordpressMatch0.6.2beta_2

wordpresswordpressMatch0.6.2.1beta_2

wordpresswordpressMatch0.7

wordpresswordpressMatch0.71

wordpresswordpressMatch1.2

wordpresswordpressMatch1.2.1

wordpresswordpressMatch1.2.2

wordpresswordpressMatch1.5

wordpresswordpressMatch1.5.1

wordpresswordpressMatch1.5.1.2

wordpresswordpressMatch1.5.1.3

wordpresswordpressMatch1.5.2

wordpresswordpressMatch2.0

wordpresswordpressMatch2.0.1

CPENameOperatorVersion
wordpress:wordpresswordpresseq0.6.2
wordpress:wordpresswordpresseq0.6.2.1
wordpress:wordpresswordpresseq0.7
wordpress:wordpresswordpresseq0.71
wordpress:wordpresswordpresseq1.2
wordpress:wordpresswordpresseq1.2.1
wordpress:wordpresswordpresseq1.2.2
wordpress:wordpresswordpresseq1.5
wordpress:wordpresswordpresseq1.5.1
wordpress:wordpresswordpresseq1.5.1.2

CPE	Name	Operator	Version
wordpress:wordpress	wordpress	eq	0.6.2
wordpress:wordpress	wordpress	eq	0.6.2.1
wordpress:wordpress	wordpress	eq	0.7
wordpress:wordpress	wordpress	eq	0.71
wordpress:wordpress	wordpress	eq	1.2
wordpress:wordpress	wordpress	eq	1.2.1
wordpress:wordpress	wordpress	eq	1.2.2
wordpress:wordpress	wordpress	eq	1.5
wordpress:wordpress	wordpress	eq	1.5.1
wordpress:wordpress	wordpress	eq	1.5.1.2