Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622.
References
Configurations
Information
Published : 2007-05-11 10:19
Updated : 2018-10-16 09:44
NVD link : CVE-2007-2627
Mitre link : CVE-2007-2627
JSON object : View
CWE
Products Affected
wordpress
- wordpress