Description

Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters.

Remediation

References

CVE-2006-0985

Related Vulnerabilities

MySQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-6662)

jQuery UI Dialog Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-31160)

Oracle Database Server CVE-2015-0371 Vulnerability (CVE-2015-0371)

WordPress Plugin Post Title Counter Cross-Site Scripting (1.1)

WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting (1.4.4)

Severity

Medium

Classification

CVE-2006-0985

Tags

Missing Update Known Vulnerabilities