Description

Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.

Remediation

References

CVE-2007-4139

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-17858)

Joomla Missing Authorization Vulnerability (CVE-2019-18674)

Apache Traffic Server Uncontrolled Resource Consumption Vulnerability (CVE-2020-9481)

WordPress Plugin On Page SEO + Social Live Chat (Formerly OPS) Cross-Site Scripting (1.0.1)

Oracle Database Server CVE-2012-3220 Vulnerability (CVE-2012-3220)

Severity

Medium

Classification

CVE-2007-4139 CWE-707

Tags

Missing Update Known Vulnerabilities