CVE-2007-1230 — Cross-site Scripting in Wordpress

4 documents4 sources

Severity

5.8MEDIUMNVD

OSV4.3

EPSS

0.6%

top 31.02%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Wordpress Debian Wordpress

Timeline

PublishedMar 2

Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.

CVSS vector

AV:N/AC:M/C:P/I:P/A:NExploitability: 8.6 | Impact: 4.9

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 2.1.2-1 (bookworm)

▶Debianwordpress/wordpress< 2.1.2-1+3

▶NVDwordpress/wordpress2.1

Patches

Patch: trac.wordpress.org ↗Patch: trac.wordpress.org ↗Patch: trac.wordpress.org ↗

🔴Vulnerability Details

GHSA

GHSA-pqc9-8ghg-8vc2: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions↗2022-05-01

▶

OSV

CVE-2007-1230: Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions↗2007-03-02

▶

📋Vendor Advisories

Debian

CVE-2007-1230: wordpress - Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php...↗2007

▶