Description

Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

Remediation

References

CVE-2009-2851

Related Vulnerabilities

phpMyFAQ Improper Authentication Vulnerability (CVE-2023-0311)

WordPress Plugin Bind Users to Taxonomy Cross-Site Scripting (0.3)

Apache Tomcat Other Vulnerability (CVE-2002-2009)

WordPress Plugin Social Share Icons & Social Share Buttons Unspecified Vulnerability (1.4)

WordPress Plugin ND Shortcodes For Visual Composer Security Bypass (5.8)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2009-2851