CVE-2007-4014

CVE-2007-4014 is an XSS issue in the index.php installation script associated with WordPress themes Blix 0.9.1, Blixed 1.0, and BlixKrieg 2.2, where the s parameter can inject arbitrary script/HTML. Connected records also describe a related CVE-2007-4165/XSS in the Blue Memories theme 1.5 for Wor...

CVE-2007-4481

CVE-2007-4481 is a documented cross-site scripting (XSS) vulnerability affecting the Blix WordPress themes (version 0.9.1 and Blix 0.9.1 Rus). The issue arises in index.php where PATH_INFO (PHP_SELF) input can be manipulated to inject arbitrary web script or HTML. The vulnerability status is base...