Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) prior to 2.7 allows remote malicious users to inject arbitrary web script or HTML via the HTTP Host header.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
wordpress wordpress mu |
||
wordpress wordpress mu 1.0 |
||
wordpress wordpress mu 1.1 |
||
wordpress wordpress mu 1.1.1 |
||
wordpress wordpress mu 1.2 |
||
wordpress wordpress mu 1.2.1 |
||
wordpress wordpress mu 1.2.2 |
||
wordpress wordpress mu 1.2.3 |
||
wordpress wordpress mu 1.2.4 |
||
wordpress wordpress mu 1.2.5a |
||
wordpress wordpress mu 1.3 |
||
wordpress wordpress mu 1.3.1 |
||
wordpress wordpress mu 1.3.2 |
||
wordpress wordpress mu 1.3.3 |
||
wordpress wordpress mu 1.5 |
||
wordpress wordpress mu 1.5.1 |
||
wordpress wordpress mu 2.6.1 |
||
wordpress wordpress mu 2.6.2 |
||
wordpress wordpress mu 2.6.3 |
||
wordpress wordpress mu 2.6.5 |
||
wordpress wordpress mu 2.7 |
Vulmon