CVE-2008-3233: XSS
Published Jul 18, 2008
·Updated
Cross-site scripting (XSS) vulnerability in WordPress before 2.6, SVN development versions only, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
54 affected components
WordPress<=2.5.1
WordPress=0.6.2
WordPress=0.6.2.1
WordPress=0.7
WordPress=0.71
WordPress=0.711
WordPress=1.0
WordPress=1.0.1
WordPress=1.0.2
WordPress=1.2
WordPress=1.2.1
WordPress=1.2.2
WordPress=1.3.1
WordPress=1.4
WordPress=1.5
WordPress=1.5-strayhorn
WordPress=1.5.1
WordPress=1.5.1.1
WordPress=1.5.1.2
WordPress=1.5.1.3
WordPress=1.5.2
WordPress=1.6
WordPress=2.0
WordPress=2.0.1
WordPress=2.0.2
WordPress=2.0.3
WordPress=2.0.4
WordPress=2.0.5
WordPress=2.0.6
WordPress=2.0.7
WordPress=2.0.8
WordPress=2.0.9
WordPress=2.0.10
WordPress=2.0.10_rc1
WordPress=2.0.10_rc2
WordPress=2.0.11
WordPress=2.1
WordPress=2.1.1
WordPress=2.1.2
WordPress=2.1.3
WordPress=2.1.3_rc1
WordPress=2.1.3_rc2
WordPress=2.2
WordPress=2.2.0
WordPress=2.2.1
WordPress=2.2.2
WordPress=2.2.3
WordPress=2.2_revision5002
WordPress=2.2_revision5003
WordPress=2.3
WordPress=2.3.1
WordPress=2.3.2
WordPress=2.3.3
WordPress=2.5
Event History
Jul 18, 2008
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3233?
CVE-2008-3233 is considered to have a medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-3233?
To mitigate CVE-2008-3233, upgrade WordPress to version 2.6 or later.
3
Who is affected by CVE-2008-3233?
CVE-2008-3233 affects all WordPress versions prior to 2.6, including multiple versions up to 2.5.1.
4
What type of vulnerability is CVE-2008-3233?
CVE-2008-3233 is a cross-site scripting (XSS) vulnerability that allows attackers to inject arbitrary web scripts.
5
When was CVE-2008-3233 disclosed?
CVE-2008-3233 was disclosed in July 2008.