wordpress -- header rss feed script insertion vulnerability

2008-11-2600:00:00

vuxml.freebsd.org

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.512 Medium

EPSS

Percentile

97.6%

JSON

Secunia reports:

Input passed via the HTTP “Host” header is not properly sanitised
before being used. This can be exploited to execute arbitrary HTML and
script code in a user’s browser session in context of an affected site
if malicious data is viewed.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchwordpress< 2.6.5UNKNOWN
FreeBSDanynoarchde-wordpress< 2.6.5UNKNOWN
FreeBSDanynoarchwordpress-mu< 2.6.5UNKNOWN