wp-admin/admin-functions.php does not properly verify unfiltered_html privilege, leading to XSS attacks in Wordpress before 2.2.3 and Wordpress MU before 1.2.5
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2007-4893 | 14 Sep 200700:00 | – | ubuntucve |
![]() | Cross site scripting | 14 Sep 200718:17 | – | prion |
![]() | CVE-2007-4893 | 14 Sep 200718:17 | – | nvd |
![]() | CVE-2007-4893 | 14 Sep 200718:17 | – | cve |
![]() | CVE-2007-4893 | 14 Sep 200718:00 | – | cvelist |
![]() | WordPress <= 2.2.3 - XSS | 14 Sep 200700:00 | – | patchstack |
![]() | Fedora Update for wordpress FEDORA-2007-2143 | 27 Feb 200900:00 | – | openvas |
![]() | Fedora Update for wordpress FEDORA-2007-2143 | 27 Feb 200900:00 | – | openvas |
![]() | Fedora 7 : wordpress-2.2.3-0.fc7 (2007-2143) | 6 Nov 200700:00 | – | nessus |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
Debian | 11 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
Debian | 999 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
Debian | 13 | all | wordpress | 2.2.3-1 | wordpress_2.2.3-1_all.deb |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo