CVE

Id
48612  
CVE No.
CVE-2011-0700  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit title (aka post title or post_title), (2) post_status, (3) comment_status, (4) ping_status, and (5) escaping of tags within the tags meta box.  
Phase
Assigned (20110131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528314 48612 CVE-2011-0700 MLIST:[oss-security] 20110209 CVE request: wordpress before 3.0.5  View
528315 48612 CVE-2011-0700 URL:http://openwall.com/lists/oss-security/2011/02/08/7  View
528316 48612 CVE-2011-0700 MLIST:[oss-security] 20110209 Re: CVE request: wordpress before 3.0.5  View
528317 48612 CVE-2011-0700 URL:http://openwall.com/lists/oss-security/2011/02/09/13  View
528318 48612 CVE-2011-0700 CONFIRM:http://codex.wordpress.org/Version_3.0.5  View
528319 48612 CVE-2011-0700 CONFIRM:http://core.trac.wordpress.org/changeset/17397  View
528320 48612 CVE-2011-0700 CONFIRM:http://core.trac.wordpress.org/changeset/17401  View
528321 48612 CVE-2011-0700 CONFIRM:http://core.trac.wordpress.org/changeset/17406  View
528322 48612 CVE-2011-0700 CONFIRM:http://core.trac.wordpress.org/changeset/17412  View
528323 48612 CVE-2011-0700 CONFIRM:http://www.wordpress.org/news/2011/02/wordpress-3-0-5/  View
528324 48612 CVE-2011-0700 DEBIAN:DSA-2190  View
528325 48612 CVE-2011-0700 URL:http://www.debian.org/security/2011/dsa-2190  View
528326 48612 CVE-2011-0700 FEDORA:FEDORA-2011-3408  View
528327 48612 CVE-2011-0700 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056412.html  View
528328 48612 CVE-2011-0700 FEDORA:FEDORA-2011-3738  View
528329 48612 CVE-2011-0700 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056998.html  View
528330 48612 CVE-2011-0700 FEDORA:FEDORA-2011-3746  View
528331 48612 CVE-2011-0700 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057003.html  View
528332 48612 CVE-2011-0700 BID:46249  View
528333 48612 CVE-2011-0700 URL:http://www.securityfocus.com/bid/46249  View
528334 48612 CVE-2011-0700 SECUNIA:43729  View
528335 48612 CVE-2011-0700 URL:http://secunia.com/advisories/43729  View
528336 48612 CVE-2011-0700 VUPEN:ADV-2011-0658  View
528337 48612 CVE-2011-0700 URL:http://www.vupen.com/english/advisories/2011/0658  View
528338 48612 CVE-2011-0700 VUPEN:ADV-2011-0721  View

Related JVN