Cross site scripting

2006-04-1720:06:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER[‘REQUEST_URI’]).

CPENameOperatorVersion
wordpresseq2.0
wordpresseq0.6.2.1 beta-2
wordpresseq1.2.1
wordpresseq0.7
wordpresseq0.71
wordpresseq1.5.2
wordpresseq1.0.1
wordpresseq1.0.2
wordpresseq1.5.1.2
wordpresseq1.2

Name	Operator	Version
wordpress	eq	2.0
wordpress	eq	0.6.2.1 beta-2
wordpress	eq	1.2.1
wordpress	eq	0.7
wordpress	eq	0.71
wordpress	eq	1.5.2
wordpress	eq	1.0.1
wordpress	eq	1.0.2
wordpress	eq	1.5.1.2
wordpress	eq	1.2