Описание
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
Ссылки
- Vendor Advisory
- Exploit
- Vendor Advisory
- Exploit
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:wordpress:wordpress_mu:*:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress_mu:1.0:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress_mu:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress_mu:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress_mu:1.3:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress_mu:1.3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 89%
0.0381
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
ubuntu
почти 18 лет назад
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
debian
почти 18 лет назад
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in W ...
github
около 4 лет назад
Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
EPSS
Процентиль: 89%
0.0381
Низкий
4.3 Medium
CVSS2
Дефекты
CWE-79