Description

Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.

Remediation

References

CVE-2007-5105

Related Vulnerabilities

WordPress Plugin Simple Membership Security Bypass (3.8.5)

WordPress Plugin Google Maps by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (1.2.1)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37150)

WordPress Plugin eCommerce Product Catalog for WordPress Cross-Site Scripting (3.0.38)

Python Inefficient Regular Expression Complexity Vulnerability (CVE-2024-7592)

Severity

Medium

Classification

CVE-2007-5105 CWE-707

Tags

Missing Update Known Vulnerabilities