Description

Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).

Remediation

References

CVE-2006-1796

Related Vulnerabilities

WordPress Plugin Site Kit by Google Security Bypass (1.7.1)

Python CVE-2019-9636 Vulnerability (CVE-2019-9636)

Oracle JRE CVE-2013-0427 Vulnerability (CVE-2013-0427)

Oracle JRE CVE-2013-2420 Vulnerability (CVE-2013-2420)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Cross-Site Scripting Vulnerabilities (1.1.30)

Severity

Medium

Classification

CVE-2006-1796

Tags

Missing Update Known Vulnerabilities