EPSS
Percentile
71.8%
Because of these vulnerabilities in post.php, attackers can inject arbitrary web script or HTML via the “p” or “comment” parameter.
Update the WordPress to the latest available version (at least 1.5.1.3).
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2107