Description

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

Remediation

References

CVE-2005-1102

Related Vulnerabilities

phpBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-7143)

Nginx Out-of-bounds Read Vulnerability (CVE-2023-27727)

WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)

Perl Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-12837)

WordPress Plugin FireStats 'firestats-wordpress.php' Remote File Include (1.6.1)

Severity

Medium

Classification

CVE-2005-1102

Tags

Missing Update Known Vulnerabilities