Description

Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the comment field in the comment form.

Remediation

References

CVE-2007-6677

Related Vulnerabilities

WordPress Plugin Booking calendar, Appointment Booking System Security Bypass (2.2.2)

WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)

ClipBucket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4848)

ATutor Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-3368)

Joomla Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1599)

Severity

Medium

Classification

CVE-2007-6677 CWE-707

Tags

Missing Update Known Vulnerabilities