Description
Cross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before 20070309 allows remote attackers to inject arbitrary web script or HTML via the year parameter in the wp_title function.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ibtana-Ecommerce Product Addons Cross-Site Scripting (0.2.3)
WordPress Plugin MAC PHOTO GALLERY 'upload-file.php' Arbitrary File Upload (2.7)
MySQL CVE-2016-8283 Vulnerability (CVE-2016-8283)
Oracle HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-4034)
MediaWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2020-10960)