Description

WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.

Remediation

References

CVE-2009-2431

Related Vulnerabilities

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41183)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-4632)

MediaWiki Incorrect Authorization Vulnerability (CVE-2020-26121)

phpBB Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5173)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1000407)

Severity

Medium

Classification

CVE-2009-2431 CWE-20

Tags

Missing Update Known Vulnerabilities