Description
Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via the query string in a POST operation that is not properly handled by the "Duplicate comment detected" feature.
Remediation
References
Related Vulnerabilities
PrestaShop Improper Authentication Vulnerability (CVE-2021-21308)
Plone CMS Weak Password Requirements Vulnerability (CVE-2020-7940)
WordPress Plugin Lightbox Gallery Cross-Site Scripting (0.9.4)
Oracle HTTP Server Other Vulnerability (CVE-2002-0655)
Oracle Database Server CVE-2006-1874 Vulnerability (CVE-2006-1874)