CVE-2009-3891: XSS
Published Nov 17, 2009
·Updated
Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable).
Affected Software
1 affected component
WordPress<=2.8.5
Remediation
Event History
Nov 17, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3891?
CVE-2009-3891 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2009-3891?
To fix CVE-2009-3891, upgrade your WordPress installation to version 2.8.6 or later.
3
Who is affected by CVE-2009-3891?
CVE-2009-3891 affects WordPress versions prior to 2.8.6.
4
What type of vulnerability is CVE-2009-3891?
CVE-2009-3891 is a cross-site scripting (XSS) vulnerability.
5
Can remote users exploit CVE-2009-3891?
Yes, remote authenticated users can exploit CVE-2009-3891 to inject arbitrary web scripts or HTML.