CVE-2006-1796 — Cross-site Scripting in Wordpress

4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.5%
top 36.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WordpressDebian Wordpress
Timeline
PublishedApr 17
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']).

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 2.0.1 (bookworm)
▶Debianwordpress/wordpress< 2.0.1+3

Patches

Patch: bugs.debian.org ↗Patch: trac.wordpress.org ↗Patch: bugs.debian.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-35pf-fj9v-j4j3: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links↗2022-05-01
▶
OSV
CVE-2006-1796: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links↗2006-04-17
▶

📋Vendor Advisories

1
Debian
CVE-2006-1796: wordpress - Cross-site scripting (XSS) vulnerability in the paging links functionality in te...↗2006
▶
CVE-2006-1796 — Cross-site Scripting in Wordpress | cvebase