CVE-2008-0204

Math Comment Spam Protection Plugin < 2.1 - Cross-Site Scripting via Parameters

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) mcsp_opt_msg_no_answer or (2) mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/485786/100/0/threaded
Various Sources x_refsource_misc
http://websecurity.com.ua/1576/
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3539

Scores

EPSS 0.0022
EPSS Percentile 44.8%

Details

CWE
CWE-79
Status published
Products (1)
wordpress/math_comment_spam_protection_plugin < 2.1
Published Jan 10, 2008
Tracked Since Feb 18, 2026