CVE-2007-1049: XSS

Published Feb 21, 2007

Updated

Cross-site scripting (XSS) vulnerability in the wpexplainnonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable.

Affected Software

22 affected components

WordPress=2.0

WordPress=2.0.2

WordPress=2.0.6

WordPress=2.0.1

WordPress=2.0.4

WordPress=0.6.2.1-beta_2

WordPress=0.7

WordPress=2.0.7

WordPress=0.71

WordPress=2.0.5

WordPress=1.5.2

WordPress=2.0.3

WordPress=1.5.1.2

WordPress=1.2.2

WordPress=1.5

WordPress=1.5.1

WordPress=0.6.2-beta_2

WordPress=1.5.1.3

Gentoo Linux

Gentoo Linux=1.4

WordPress=1.2

WordPress=1.2.1

Remediation

Patch Available

http://trac.wordpress.org/changeset/4876

Event History

Feb 21, 2007

CVE Published

05:28 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1049?

CVE-2007-1049 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2007-1049?

To fix CVE-2007-1049, upgrade your WordPress installation to version 2.0.9 or later.

What versions of WordPress are affected by CVE-2007-1049?

CVE-2007-1049 affects WordPress versions prior to 2.0.9 and 2.1 prior to 2.1.1.

What type of vulnerability is CVE-2007-1049?

CVE-2007-1049 is a cross-site scripting (XSS) vulnerability.

Can CVE-2007-1049 be exploited remotely?

Yes, CVE-2007-1049 allows remote attackers to inject arbitrary web scripts or HTML.