Description
Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
References
- 20070821 Vulnerabilities digest mailing-list
- sirius-index-xss(36154) vdb-entry
- 38326 vdb-entry
- http://websecurity.com.ua/1252/
- http://securityvulns.ru/Rdocument839.html