Cross site scripting

DISPUTED Cross-site scripting XSS vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as 1 onfocus and 2 onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue i...

CVE-2006-0733

This CVE affects WordPress 2.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw allowing injection of scripts via scriptable attributes (onfocus/onblur) in the author’s website field. The issue is noted as potentially exploitable only by the same user who injects the XSS, limiting practi...