CVE-2007-4166 — Cross-site Scripting in Wordpress Unamed Theme

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.7%
top 27.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Wordpress Unamed ThemeWordpress Unamed Theme SE
Timeline
PublishedAug 7
Latest updateMay 1

Description

Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165. NOTE: some of these details are obtained from third party information.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

1
GHSA
GHSA-9wjm-59qc-x6qf: Cross-site scripting (XSS) vulnerability in index↗2022-05-01
▶