CVE-2005-2107: XSS

Published Jul 1, 2005

Updated

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.

Affected Software

7 affected components

WordPress=1.0

WordPress=1.0.1

WordPress=1.0.2

WordPress=1.2

WordPress=1.5

WordPress=1.5.1

WordPress=1.5.1.2

Remediation

Patch Available

http://secunia.com/advisories/15831

Event History

Jul 1, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2107?

CVE-2005-2107 is considered a high-severity vulnerability due to the potential for remote code execution via cross-site scripting.

How do I fix CVE-2005-2107?

To fix CVE-2005-2107, upgrade to a patched version of WordPress that addresses these XSS vulnerabilities.

Which versions of WordPress are affected by CVE-2005-2107?

CVE-2005-2107 affects WordPress versions 1.5.1.2 and earlier.

What are the risks of not addressing CVE-2005-2107?

Not addressing CVE-2005-2107 can expose your site to XSS attacks, potentially allowing attackers to steal user data or perform unauthorized actions.

Who can exploit CVE-2005-2107?

CVE-2005-2107 can be exploited by remote attackers who can inject arbitrary web scripts or HTML into vulnerable WordPress sites.