CVE-2008-4733

MEDIUM 4.3 CVSS 2.0

Published: October 24, 2008
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-79
CVSS vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.

Affected products and versions

n/a n/a — Versions not specified

References

chxsecurity.org http://chxsecurity.org/advisories/adv-3-full.txt
secunia.com http://secunia.com/advisories/32253 Vendor Advisory
securityreason.com http://securityreason.com/securityalert/4492
www.securityfocus.com http://www.securityfocus.com/archive/1/497313/100/0/threaded
www.securityfocus.com http://www.securityfocus.com/bid/31750 Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/45861
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References