Description

Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters.

Remediation

References

CVE-2006-0985

Related Vulnerabilities

phpMyAdmin Improper Input Validation Vulnerability (CVE-2009-1149)

WordPress Plugin Stockdio Historical Chart Cross-Site Scripting (2.7.2)

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-23871)

WordPress Plugin Custom Dashboard & Login Page-AGCA Multiple Unspecified Vulnerabilities (1.5.4.2)

Internet Information Services Other Vulnerability (CVE-2011-5279)

Severity

Medium

Classification

CVE-2006-0985

Tags

Missing Update Known Vulnerabilities