Unscored CVE-2005-1102 EUVD-2005-1105GHSA-cc7r-mf7w-vgrj

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to e…

Published Apr 13, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in template-functions-post.php in WordPress 1.5 and earlier allow remote attackers to execute arbitrary commands via the (1) content or (2) title of the post.

References

20050412 WordPress XSS and HTML injection mailing-list
GLSA-200506-04 vendor-advisory
http://bugs.gentoo.org/show_bug.cgi?id=88926
http://wordpress.org/support/topic.php?id=30721