CVE-2005-1102

medium

Description

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

References

http://wordpress.org/support/topic.php?id=30721

http://security.gentoo.org/glsa/glsa-200506-04.xml

http://marc.info/?l=bugtraq&m=111336102101571&w=2

http://bugs.gentoo.org/show_bug.cgi?id=88926

Details

Source: Mitre, NVD

Published: 2005-05-02

Updated: 2016-10-18

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N