Description

Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.

Remediation

References

CVE-2007-5105

Related Vulnerabilities

PHP NULL Pointer Dereference Vulnerability (CVE-2016-7131)

OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0737)

WordPress Plugin WP Content Copy Protection & No Right Click Cross-Site Request Forgery (3.1.5)

MySQL CVE-2020-14663 Vulnerability (CVE-2020-14663)

WordPress Plugin Woocommerce CSV importer Arbitrary File Deletion (3.3.6)

Severity

Medium

Classification

CVE-2007-5105 CWE-707

Tags

Missing Update Known Vulnerabilities