EUVD-2007-4527

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-newblog.php in WordPress multi-user MU 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the weblogid parameter Username field...