CVE-2007-4166

MEDIUM 5.0 CVSS 2.0

Published: August 7, 2007
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
CVSS vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165. NOTE: some of these details are obtained from third party information.

Affected products and versions

n/a n/a — Versions not specified

References

osvdb.org http://osvdb.org/36604
secunia.com http://secunia.com/advisories/26321 Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/25215
xuyiyang.com http://xuyiyang.com/2007/06/29/unnamed-1-217/
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/35821
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References