CVE-2007-4014: XSS
First published: Thu Jul 26 2007(Updated: )
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wordpress Blix | =0.9.1 | |
| Wordpress Blixkrieg | =2.2 | |
| Wordpress Blixed | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/24954
- http://secunia.com/advisories/26109
- http://secunia.com/advisories/26115
- http://secunia.com/advisories/26116
- http://www.osvdb.org/37056
- http://www.osvdb.org/37057
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35472
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/wordpress
- canonical/wordpress blix
- version/wordpress blix/0.9.1
- canonical/wordpress blixkrieg
- version/wordpress blixkrieg/2.2
- canonical/wordpress blixed
- version/wordpress blixed/1.0