CVE-2007-4104

MEDIUM 4.3 CVSS 2.0

Published: July 31, 2007
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.

Affected products and versions

n/a n/a — Versions not specified

References

blogsecurity.net http://blogsecurity.net/news/news-130707/
blogsecurity.net http://blogsecurity.net/wordpress/news-260707/
bueltge.de http://bueltge.de/plugin-wp-feedstats-in-neuer-version/481/ Patch
marc.info http://marc.info/?l=full-disclosure&m=118548811323718&w=2 Exploit
osvdb.org http://osvdb.org/37259
secunia.com http://secunia.com/advisories/26249 Patch, Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/25085 Exploit, Patch
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/35646
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References