Description

Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.

Remediation

References

CVE-2007-5105

Related Vulnerabilities

WordPress Plugin WP Page Builder Multiple Vulnerabilities (1.2.3)

WordPress Plugin Backup, Restore and Migrate WordPress Sites With the XCloner Cross-Site Request Forgery (3.1.0)

Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5498)

markdown-it Inefficient Regular Expression Complexity Vulnerability (CVE-2022-21670)

WordPress Plugin cformsII Multiple Cross-Site Scripting Vulnerabilities (14.13.2)

Severity

Medium

Classification

CVE-2007-5105 CWE-707

Tags

Missing Update Known Vulnerabilities