CVE-2007-4139: XSS

Published Aug 3, 2007

Updated

Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, allows remote attackers to inject arbitrary web script or HTML via the style parameter to wp-admin/upload.php.

Affected Software

1 affected component

WordPress=2.2.1

Event History

Aug 3, 2007

CVE Published

10:17 AM

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4139?

CVE-2007-4139 is classified as a high severity vulnerability due to its potential for remote code execution via cross-site scripting.

How do I fix CVE-2007-4139?

To fix CVE-2007-4139, you should upgrade to a secure version of WordPress that is not affected by this vulnerability.

What impact does CVE-2007-4139 have on my WordPress site?

CVE-2007-4139 allows attackers to inject and execute arbitrary scripts or HTML on your WordPress site, compromising user data and site integrity.

Which versions of WordPress are affected by CVE-2007-4139?

CVE-2007-4139 specifically affects WordPress version 2.2.1.

How can I identify if my site is vulnerable to CVE-2007-4139?

If you are running WordPress version 2.2.1, your site is vulnerable to CVE-2007-4139 and should be updated immediately.