CVE-2007-0106

Cross-site scripting XSS vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when...

CVE-2007-0106

CVE-2007-0106 affects WordPress up to version 2.0.5 (before 2.0.6). The issue is a Cross-site Scripting (XSS) vulnerability in the CSRF protection scheme, where an attacker can inject arbitrary script/HTML via a CSRF attack using an invalid token and quote characters or HTML tags in URL variable ...