CVE-2007-1230

WordPress prior to 2.1.2-alpha contains cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php. The issue allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header or the URI. This is the same family noted in CVE-2007-1230/1049 and is documented a...

CVE-2007-1230

Multiple cross-site scripting XSS vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via 1 the Referer HTTP header or 2 the URI, a different vulnerability than CVE-2007-1049...

CVE-2007-1230

Multiple cross-site scripting XSS vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via 1 the Referer HTTP header or 2 the URI, a different vulnerability than CVE-2007-1049...