CVE-2008-4671

Currently unrated

Key Information:

Vendor
Wordpress
Status
WordPress Mu
Vendor
CVE Published:
22 October 2008

Summary

Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/45512
vdb-entryx_refsource_XF
http://secunia.com/advisories/32060
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/31482
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.