exploitDog

CVE-2008-5278

Опубликовано: 25 нояб. 2008

Источник: redhat

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=473577wordpress-mu: XSS vulnerability in RSS Feed Generator

EPSS

Процентиль: 87%

0.03233

Низкий

Связанные уязвимости

CVE-2008-5278

ubuntu

больше 17 лет назад

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

CVE-2008-5278

nvd

больше 17 лет назад

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

CVE-2008-5278

debian

больше 17 лет назад

Cross-site scripting (XSS) vulnerability in the self_link function in ...

GHSA-ggp3-c542-qp4x

github

около 4 лет назад

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

EPSS

Процентиль: 87%

0.03233

Низкий