CVE-2008-0206

CVE-2008-0206 affects the WordPress Captcha plugin (Captcha! 2.5d and earlier). It describes multiple XSS vulnerabilities in captcha.php, exploitable via the parameters: captcha_ttffolder, captcha_numchars, captcha_ttfrange, and captcha_secret. Remote attackers could inject arbitrary web script o...