CVE-2007-4482

The CVE-2007-4482 entry describes a Cross-site scripting (XSS) vulnerability in the Pool theme for WordPress v1.0.7, exploitable via PATH_INFO (PHP_SELF) in index.php. The vulnerability could allow remote attackers to inject arbitrary web script or HTML. Affected component: Pool theme (WordPress)...

WordPress Pool Theme <= 1.0.7 - XSS

Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...