CVE-2007-1230: XSS
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1230?
CVE-2007-1230 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2007-1230?
To fix CVE-2007-1230, upgrade to WordPress version 2.1.2-alpha or later, which addresses the XSS vulnerabilities.
What are the primary vulnerabilities in CVE-2007-1230?
CVE-2007-1230 involves multiple cross-site scripting vulnerabilities that allow attackers to inject arbitrary web scripts via the Referer HTTP header or URI.
Which software versions are affected by CVE-2007-1230?
CVE-2007-1230 affects WordPress versions prior to 2.1.2-alpha.
Can CVE-2007-1230 be exploited remotely?
Yes, CVE-2007-1230 can be exploited remotely, allowing attackers to execute scripts on users' browsers.