Unscored CVE-2007-4481 EUVD-2007-4464GHSA-h68g-pwvj-5r42

Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attac…

Published Aug 22, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

References

http://websecurity.com.ua/1248/
20070821 Vulnerabilities digest mailing-list
http://securityvulns.ru/Rdocument825.html