WordPress CVEs

Description

Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via a CSRF attack with an invalid token and quote characters or HTML tags in URL variable names, which are not properly handled when WordPress generates a new link to verify the request.

Affected WordPress components

• WordPress core
  Confirmed match
  Version 2.0; Version 2.0.1; Version 2.0.2; Version 2.0.3; Version 2.0.4; Version 2.0.5

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• wordpress wordpress — Version 2.0
• wordpress wordpress — Version 2.0.1
• wordpress wordpress — Version 2.0.2
• wordpress wordpress — Version 2.0.3
• wordpress wordpress — Version 2.0.4
• wordpress wordpress — Version 2.0.5

References

• osvdb.org http://osvdb.org/33397
• secunia.com http://secunia.com/advisories/23595 Vendor Advisory
• securityreason.com http://securityreason.com/securityalert/2114
• wordpress.org http://wordpress.org/development/2007/01/wordpress-206/ Patch, Vendor Advisory
• www.hardened-php.net http://www.hardened-php.net/advisory_012007.140.html Vendor Advisory
• www.securityfocus.com http://www.securityfocus.com/archive/1/456048/100/0/threaded
• www.securityfocus.com http://www.securityfocus.com/bid/21893 Patch, Vendor Advisory
• www.vupen.com http://www.vupen.com/english/advisories/2007/0061
• nvd.nist.gov Official NVD record