PT-2011-2569 · WordPress · Wordpress

Nils Jueneman + 1 · Publicado 2011-03-14 · Atualizado 2017-11-21 · CVE-2011-0700

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.0.5

Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This is achieved through various vectors, including the Quick/Bulk Edit title, post status, comment status, ping status, and improper escaping of tags within the tags meta box.

Recommendations For versions prior to 3.0.5, update to version 3.0.5 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-0700

DSA-2190-1

Produtos afetados

Wordpress

Referências · 21

• http://core.trac.wordpress.org/changeset/17406 · Aviso do Fabricante
• http://securityfocus.com/bid/46249 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0700 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056412.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/02/09/13 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-0700 · Aviso do Fabricante
• http://wordpress.org/news/2011/02/wordpress-3-0-5 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056998.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057003.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-0700 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2011-0700 · Aviso do Fabricante
• http://secunia.com/advisories/43729 · Nota
• http://openwall.com/lists/oss-security/2011/02/08/7 · Nota
• http://codex.wordpress.org/Version_3.0.5 · Aviso do Fabricante
• http://core.trac.wordpress.org/changeset/17397 · Aviso do Fabricante