CVE-2005-2107

WordPress <= 1.5.1.2 - Cross-Site Scripting via p or comment Parameter

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.

References (3)

Core 3
Core References
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15831
Exploit, Vendor Advisory x_refsource_misc
http://www.gulftech.org/?node=research&article_id=00085-06282005
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112006967221438&w=2

Scores

EPSS 0.0091
EPSS Percentile 76.1%

Details

Status published
Products (7)
wordpress/wordpress 1.0
wordpress/wordpress 1.0.1
wordpress/wordpress 1.0.2
wordpress/wordpress 1.2
wordpress/wordpress 1.5
wordpress/wordpress 1.5.1
wordpress/wordpress 1.5.1.2
Published Jul 05, 2005
Tracked Since Feb 18, 2026