Lucene search

K
cve[email protected]CVE-2008-4671
HistoryOct 22, 2008 - 10:30 a.m.

CVE-2008-4671

2008-10-2210:30:01
CWE-79
web.nvd.nist.gov
21
cve-2008-4671
cross-site scripting
xss
wordpress mu
wpmu
2.6
nvd

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%

Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.

Affected configurations

NVD
Node
wordpresswordpress_mu
OR
wordpresswordpress_muMatch1.0
OR
wordpresswordpress_muMatch1.2.2
OR
wordpresswordpress_muMatch1.2.3
OR
wordpresswordpress_muMatch1.3
OR
wordpresswordpress_muMatch1.3.1

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

55.8%