Description
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.
Remediation
References
Related Vulnerabilities
Drupal Improper Authentication Vulnerability (CVE-2019-10911)
Internet Information Services Other Vulnerability (CVE-2001-0335)
MySQL CVE-2022-21378 Vulnerability (CVE-2022-21378)
Perl Improper Certificate Validation Vulnerability (CVE-2023-31486)
Jenkins Incorrect Authorization Vulnerability (CVE-2023-27903)