Cross-Site Scripting Vulnerability in WordPress 2.0.5 Admin Template
There is a Cross Site Scripting (XSS) vulnerability in WordPress 2.0.5. It happens in the wp-admin/templates.php file. Remote attackers can put harmful web script or HTML in through the file parameter. Some places say this problem is in the get_file_description function in wp-admin/admin-functions.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wordpress wordpress |
||
wordpress wordpress 0.6.2 |
||
wordpress wordpress 0.6.2.1 |
||
wordpress wordpress 0.7 |
||
wordpress wordpress 0.71 |
||
wordpress wordpress 1.2 |
||
wordpress wordpress 1.2.1 |
||
wordpress wordpress 1.2.2 |
||
wordpress wordpress 1.5 |
||
wordpress wordpress 1.5.1 |
||
wordpress wordpress 1.5.1.2 |
||
wordpress wordpress 1.5.1.3 |
||
wordpress wordpress 1.5.2 |
||
wordpress wordpress 2.0 |
||
wordpress wordpress 2.0.1 |
||
wordpress wordpress 2.0.2 |
||
wordpress wordpress 2.0.3 |
||
wordpress wordpress 2.0.4 |