Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.
References
Link | Resource |
---|---|
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html | Mailing List Third Party Advisory |
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html | Mailing List Third Party Advisory |
http://bugs.gentoo.org/show_bug.cgi?id=278492 | Issue Tracking Third Party Advisory |
http://www.openwall.com/lists/oss-security/2009/07/21/1 | Mailing List Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=512900 | Issue Tracking Third Party Advisory |
http://securitytracker.com/id?1022589 | Third Party Advisory VDB Entry |
http://wordpress.org/development/2009/07/wordpress-2-8-2/ | Patch Vendor Advisory |
http://www.debian.org/security/2009/dsa-1871 | Third Party Advisory |
Configurations
Information
Published : 2009-08-18 14:00
Updated : 2017-12-07 13:36
NVD link : CVE-2009-2851
Mitre link : CVE-2009-2851
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
wordpress
- wordpress