Description

Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2008-3233

Related Vulnerabilities

MediaWiki Improper Access Control Vulnerability (CVE-2012-4379)

WordPress Plugin Contact Form by BestWebSoft Cross-Site Request Forgery (3.82)

WordPress Plugin Widget Logic Cross-Site Request Forgery (5.9.0)

Joomla Other Vulnerability (CVE-2005-4650)

WordPress Plugin Bliss Gallery Arbitrary File Upload (2.3)

Severity

Medium

Classification

CVE-2008-3233 CWE-707

Tags

Missing Update Known Vulnerabilities