CVE-2008-0192: XSS
Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the popuptitle parameter to (1) wp-admin/post.php or (2) wp-admin/page-new.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0192?
The severity of CVE-2008-0192 is considered high due to the potential for remote code execution via cross-site scripting.
How do I fix CVE-2008-0192?
To fix CVE-2008-0192, upgrade WordPress to the latest version that addresses this vulnerability.
What are the attack vectors for CVE-2008-0192?
The attack vectors for CVE-2008-0192 include injecting script through the popuptitle parameter in wp-admin/post.php and wp-admin/page-new.php.
Who is affected by CVE-2008-0192?
Users running WordPress version 2.0.9 or earlier are affected by CVE-2008-0192.
What types of attacks can CVE-2008-0192 enable?
CVE-2008-0192 can enable cross-site scripting attacks, allowing attackers to execute arbitrary web scripts or HTML in a user's browser.