Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to (1) wp-admin/post.php or (2) wp-admin/page-new.php.

Remediation

References

CVE-2008-0192

Related Vulnerabilities

PrestaShop CVE-2018-19125 Vulnerability (CVE-2018-19125)

WordPress Plugin WordPress Download Manager Unspecified Vulnerability (3.1.18)

WordPress Plugin Essential Blocks-Page Builder Gutenberg Blocks, Patterns & Templates Cross-Site Request Forgery (3.8.5)

WordPress Plugin Admin side data storage for Contact Form 7 Cross-Site Scripting (1.1.1)

WordPress Plugin Under Construction/Maintenance Mode from Acurax Multiple Unspecified Vulnerabilities (2.5.2)

Severity

Medium

Classification

CVE-2008-0192 CWE-707

Tags

Missing Update Known Vulnerabilities