Lucene search

K
patchstackNathan PartlanPATCHSTACK:4A55B8634C85A5109B270A7B28D10468
HistoryApr 21, 2012 - 12:00 a.m.

WordPress <= 3.3.1 - CSRF and XSS

2012-04-2100:00:00
Nathan Partlan
patchstack.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

There are cross site scripting and cross site request forgery vulnerabilities via SWF Applets.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle3.3.1

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N