Lucene search

[email protected]CVE-2008-4733

HistoryOct 24, 2008 - 10:30 a.m.

CVE-2008-4733

2008-10-2410:30:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2008-4733

cross-site scripting

xss

wpcommentremix.php

wp comment remix

1.4.4

wordpress

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.

Affected configurations

NVD

Node

pressographywp_comment_remix_pluginRange≤1.4.3

pressographywp_comment_remix_pluginMatch1.4

AND

wordpresswordpress

CPENameOperatorVersion
pressography:wp_comment_remix_pluginpressography wp comment remix pluginle1.4.3
pressography:wp_comment_remix_pluginpressography wp comment remix plugineq1.4

CPE	Name	Operator	Version
pressography:wp_comment_remix_plugin	pressography wp comment remix plugin	le	1.4.3
pressography:wp_comment_remix_plugin	pressography wp comment remix plugin	eq	1.4

References

chxsecurity.org/advisories/adv-3-full.txt

secunia.com/advisories/32253

securityreason.com/securityalert/4492

www.securityfocus.com/archive/1/497313/100/0/threaded

www.securityfocus.com/bid/31750

exchange.xforce.ibmcloud.com/vulnerabilities/45861

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

JSON

Related for CVE-2008-4733

cvelist1 nvd1 patchstack1 prion1