CVE-2004-1559: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirectto, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirecturl parameter to admin-header.php, (3) popuptitle, popupurl, content, or posttitle parameters to bookmarklet.php, (4) catID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1559?
CVE-2004-1559 has a medium severity rating due to its potential for allowing remote attackers to perform cross-site scripting (XSS) attacks.
How do I fix CVE-2004-1559?
To fix CVE-2004-1559, upgrade to a newer version of WordPress beyond 1.2 that has addressed these XSS vulnerabilities.
What types of attacks can be executed using CVE-2004-1559?
CVE-2004-1559 allows attackers to perform cross-site scripting attacks that can lead to session hijacking, redirecting users, or executing arbitrary JavaScript.
Which versions of WordPress are affected by CVE-2004-1559?
CVE-2004-1559 specifically affects WordPress version 1.2.
Can CVE-2004-1559 be exploited without user interaction?
Yes, CVE-2004-1559 can be exploited without user interaction, allowing attackers to inject scripts into web pages viewed by users.