CVE-2005-1102

WordPress < 1.5 - Cross-Site Scripting via Post Content or Title

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111336102101571&w=2
Patch, Vendor Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200506-04.xml
Issue Tracking x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=88926
Patch, Vendor Advisory x_refsource_misc
http://wordpress.org/support/topic.php?id=30721

Scores

EPSS 0.0144
EPSS Percentile 81.0%

Details

Status published
Products (1)
wordpress/wordpress < 1.5
Published May 02, 2005
Tracked Since Feb 18, 2026