Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2008-5278

🗓️ 28 Nov 2008 19:00:00Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov👁 75 Views🌐 WEB

Cross-site scripting vulnerability in WordPress RSS Feed Generator

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
nessus		WordPress < 2.6.5 'feed.php' XSS
2 Dec 200800:00
–nessus
nessus		Fedora 8 : wordpress-2.6.5-2.fc8 (2008-10468)
3 Dec 200800:00
–nessus
nessus		Fedora 10 : wordpress-2.6.5-2.fc10 (2008-10482)
23 Apr 200900:00
–nessus
nessus		Fedora 9 : wordpress-2.6.5-2.fc9 (2008-10483)
3 Dec 200800:00
–nessus
nessus		Fedora 10 : wordpress-mu-2.6.5-1.fc10 (2008-11104)
23 Apr 200900:00
–nessus
nessus		FreeBSD : wordpress -- header rss feed script insertion vulnerability (622bc638-be27-11dd-a578-0030843d3802)
1 Dec 200800:00
–nessus
nessus		WordPress wp-includes/feed.php self_link() Function Host Header RSS Feed XSS
2 Dec 200800:00
–nessus
freebsd		wordpress -- header rss feed script insertion vulnerability
26 Nov 200800:00
–freebsd
checkpoint_advisories		Update Protection against WordPress Host Header XSS Vulnerability
5 Dec 200800:00
–checkpoint_advisories
checkpoint_advisories		WordPress RSS feed Generator self_link HTTP_HOST Cross-Site Scripting (CVE-2008-5278)
30 Sep 200900:00
–checkpoint_advisories
Rows per page
NVD
Node
OR
wordpresswordpressRange≤2.6.3
wordpresswordpressMatch0.6.2
wordpresswordpressMatch0.6.2beta_2
wordpresswordpressMatch0.6.2.1
wordpresswordpressMatch0.6.2.1beta_2
wordpresswordpressMatch0.7
wordpresswordpressMatch0.71
wordpresswordpressMatch0.71-gold
wordpresswordpressMatch0.72
wordpresswordpressMatch0.72beta1
wordpresswordpressMatch0.72beta2
wordpresswordpressMatch0.72rc1
wordpresswordpressMatch0.711
wordpresswordpressMatch1.0
wordpresswordpressMatch1.0-platinum
wordpresswordpressMatch1.0.1
wordpresswordpressMatch1.0.1-miles
wordpresswordpressMatch1.0.2
wordpresswordpressMatch1.0.2-blakey
wordpresswordpressMatch1.2
wordpresswordpressMatch1.2beta
wordpresswordpressMatch1.2-delta
wordpresswordpressMatch1.2-mingus
wordpresswordpressMatch1.2.1
wordpresswordpressMatch1.2.2
wordpresswordpressMatch1.3.1
wordpresswordpressMatch1.4
wordpresswordpressMatch1.5
wordpresswordpressMatch1.5-strayhorn
wordpresswordpressMatch1.5.1
wordpresswordpressMatch1.5.1.1
wordpresswordpressMatch1.5.1.2
wordpresswordpressMatch1.5.1.3
wordpresswordpressMatch1.5.2
wordpresswordpressMatch1.6
wordpresswordpressMatch2.0
wordpresswordpressMatch2.0.1
wordpresswordpressMatch2.0.2
wordpresswordpressMatch2.0.3
wordpresswordpressMatch2.0.4
wordpresswordpressMatch2.0.5
wordpresswordpressMatch2.0.6
wordpresswordpressMatch2.0.7
wordpresswordpressMatch2.0.8
wordpresswordpressMatch2.0.9
wordpresswordpressMatch2.0.10
wordpresswordpressMatch2.0.10_rc1
wordpresswordpressMatch2.0.10_rc2
wordpresswordpressMatch2.0.11
wordpresswordpressMatch2.1
wordpresswordpressMatch2.1alpha_3
wordpresswordpressMatch2.1.1
wordpresswordpressMatch2.1.2
wordpresswordpressMatch2.1.3
wordpresswordpressMatch2.1.3_rc1
wordpresswordpressMatch2.1.3_rc2
wordpresswordpressMatch2.2
wordpresswordpressMatch2.2.0
wordpresswordpressMatch2.2.1
wordpresswordpressMatch2.2.2
wordpresswordpressMatch2.2.3
wordpresswordpressMatch2.2_revision5002
wordpresswordpressMatch2.2_revision5003
wordpresswordpressMatch2.3
wordpresswordpressMatch2.3beta3
wordpresswordpressMatch2.3rc1
wordpresswordpressMatch2.3.1
wordpresswordpressMatch2.3.1rc1
wordpresswordpressMatch2.3.2
wordpresswordpressMatch2.3.3
wordpresswordpressMatch2.5
wordpresswordpressMatch2.5.1
wordpresswordpressMatch2.6
wordpresswordpressMatch2.6.1
ParameterPositionPathDescriptionCWE
Hostheader/wp-includes/feed.phpXSS via Host HTTP header in WordPress RSS feed generator (wp-includes/feed.php) allowing injection of script/HTML.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 22:59Current
5.5Medium risk
Vulners AI Score5.5
CVSS 24.3
EPSS0.03233
CWE-79
cve-2008-5278cross-site scriptingxss vulnerabilitywordpressrss feed generator
75