CVE-2009-2851

Опубликовано: 20 фев. 2009

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=512900WordPress: XSS via unescaped HTML URLs as author comments in the admin page

EPSS

Процентиль: 84%

0.02221

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2009-2851

ubuntu

почти 16 лет назад

Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

CVE-2009-2851

nvd

почти 16 лет назад

Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

CVE-2009-2851

debian

почти 16 лет назад

Cross-site scripting (XSS) vulnerability in the administrator interfac ...

GHSA-9q3x-8xjm-8642

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment author URL.

EPSS

Процентиль: 84%

0.02221

Низкий

4.3 Medium

CVSS2