Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.
References
Link | Resource |
---|---|
http://bugs.gentoo.org/show_bug.cgi?id=278492 | Issue Tracking Third Party Advisory |
http://securitytracker.com/id?1022589 | Third Party Advisory VDB Entry |
http://wordpress.org/development/2009/07/wordpress-2-8-2/ | Patch Vendor Advisory |
http://www.debian.org/security/2009/dsa-1871 | Third Party Advisory |
http://www.openwall.com/lists/oss-security/2009/07/21/1 | Mailing List Third Party Advisory |
https://bugzilla.redhat.com/show_bug.cgi?id=512900 | Issue Tracking Third Party Advisory |
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01241.html | Mailing List Third Party Advisory |
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg01253.html | Mailing List Third Party Advisory |
Configurations
History
No history.
Information
Published : 2009-08-18 21:00
Updated : 2024-02-28 11:21
NVD link : CVE-2009-2851
Mitre link : CVE-2009-2851
CVE.ORG link : CVE-2009-2851
JSON object : View
Products Affected
wordpress
- wordpress
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')