Description

Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable).

Remediation

References

CVE-2009-3891

Related Vulnerabilities

WordPress Plugin WooCommerce PDF Vouchers-Ultimate Gift Cards Unspecified Vulnerability (4.9.4)

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-6131)

MySQL CVE-2021-2019 Vulnerability (CVE-2021-2019)

Moodle Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-1493)

Microsoft SQL Server Other Vulnerability (CVE-2000-1088)

Severity

Low

Classification

CVE-2009-3891 CWE-707

Tags

Missing Update Known Vulnerabilities