Description

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.

Remediation

References

CVE-2005-2107

Related Vulnerabilities

RubyGems Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2018-1000075)

WordPress Plugin Traffic Analyzer SQL Injection (3.4.2)

Oracle JRE CVE-2024-20926 Vulnerability (CVE-2024-20926)

XWiki Inadequate Encryption Strength Vulnerability (CVE-2022-29161)

MySQL CVE-2022-39410 Vulnerability (CVE-2022-39410)

Severity

Medium

Classification

CVE-2005-2107

Tags

Missing Update Known Vulnerabilities