Description

Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI) that accesses index.php. NOTE: this can be leveraged for PHP code execution in an administrative session.

Remediation

References

CVE-2007-3240

Related Vulnerabilities

OpenSSL NULL Pointer Dereference Vulnerability (CVE-2009-1387)

e107 Other Vulnerability (CVE-2010-0996)

WordPress Plugin Survey Maker-Best WordPress Survey Unspecified Vulnerability (3.2.0)

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2937)

WordPress Plugin GiveWP-Donation and Fundraising Platform Security Bypass (2.5.9)

Severity

Medium

Classification

CVE-2007-3240

Tags

Missing Update Known Vulnerabilities