First published: Wed Apr 13 2005(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
WordPress | <=1.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-1102 has a medium severity level due to its potential for cross-site scripting attacks.
To fix CVE-2005-1102, you should upgrade your WordPress installation to version 1.5.1 or later.
CVE-2005-1102 contains multiple cross-site scripting (XSS) vulnerabilities.
Anyone using WordPress version 1.5 or earlier is affected by CVE-2005-1102.
Attackers can execute arbitrary commands through the content or title of posts due to CVE-2005-1102.