Description
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References (9)
Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/37056
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35474
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26109
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35472
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26115
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/24954
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/37057
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/26116
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35473
Scores
EPSS
0.0175
EPSS Percentile
82.8%
Details
Status
published
Products (3)
wordpress/blix
0.9.1
wordpress/blixed
1.0
wordpress/blixkrieg
2.2
Published
Jul 26, 2007
Tracked Since
Feb 18, 2026