Description

Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Remediation

References

CVE-2006-1263

Related Vulnerabilities

TYPO3 URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2010-3661)

OpenSSL Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2015-3216)

Sqlite Improper Validation of Array Index Vulnerability (CVE-2022-35737)

Zope Web Application Server Other Vulnerability (CVE-2001-1227)

WordPress 4.8.x Possible SQL Injection Vulnerability (4.8 - 4.8.2)

Severity

Medium

Classification

CVE-2006-1263

Tags

Missing Update Known Vulnerabilities