Cross site scripting

2012-02-1417:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

JSON

Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter, related to AJAX paging.

CPENameOperatorVersion
wp-recentcommentsle2.0.7
wp-recentcommentseq1.8
wp-recentcommentseq1.8.1
wp-recentcommentseq1.8.2
wp-recentcommentseq2.0
wp-recentcommentseq2.0.1
wp-recentcommentseq2.0.2
wp-recentcommentseq2.0.3
wp-recentcommentseq2.0.4
wp-recentcommentseq2.0.5

Name	Operator	Version
wp-recentcomments	le	2.0.7
wp-recentcomments	eq	1.8
wp-recentcomments	eq	1.8.1
wp-recentcomments	eq	1.8.2
wp-recentcomments	eq	2.0
wp-recentcomments	eq	2.0.1
wp-recentcomments	eq	2.0.2
wp-recentcomments	eq	2.0.3
wp-recentcomments	eq	2.0.4
wp-recentcomments	eq	2.0.5