CVE-2007-2627

Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

Information

Published : 2007-05-11 10:19

Updated : 2018-10-16 09:44


NVD link : CVE-2007-2627

Mitre link : CVE-2007-2627


JSON object : View

Advertisement

dedicated server usa

Products Affected

wordpress

  • wordpress