CVE-2007-4153 — Cross-site Scripting in Wordpress

4 documents4 sources
Severity
2.1LOWNVD
EPSS
0.5%
top 33.69%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
WordpressDebian Wordpress
Timeline
PublishedAug 3
Latest updateMay 1

Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the Options Database Table in the Admin Panel, accessed through options.php; or (2) the opml_url parameter to link-import.php. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.

CVSS vector

AV:N/AC:H/C:N/I:P/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages3 packages

▶debiandebian/wordpress< wordpress 2.2.2-1 (bookworm)
▶Debianwordpress/wordpress< 2.2.2-1+3

🔴Vulnerability Details

2
GHSA
GHSA-qwg9-63m8-jhjg: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2↗2022-05-01
▶
OSV
CVE-2007-4153: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2↗2007-08-03
▶

📋Vendor Advisories

1
Debian
CVE-2007-4153: wordpress - Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow rem...↗2007
▶
CVE-2007-4153 — Cross-site Scripting in Wordpress | cvebase