NVD

Id
15788  
Name
CVE-2010-4536  
Description
Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the & (ampersand) character, (2) the case of an attribute name, (3) a padded entity, and (4) an entity that is not in normalized form.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2011-01-03  
Modified Date
2011-01-26  
Seq
2010-4536  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89500 15788 CVE-2010-4536 http://core.trac.wordpress.org/changeset/17172/branches/3.0  View
89501 15788 CVE-2010-4536 FEDORA-2011-0315  View
89502 15788 CVE-2010-4536 FEDORA-2011-0306  View
89503 15788 CVE-2010-4536 http://wordpress.org/news/2010/12/3-0-4-update/  View
89504 15788 CVE-2010-4536 [oss-security] 20101230 CVE request: wordpress before 3.0.4 XSS  View
89505 15788 CVE-2010-4536 45620  View
89506 15788 CVE-2010-4536 ADV-2010-3335  View
89507 15788 CVE-2010-4536 ADV-2011-0167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37721 JVNDB-2010-003506 WordPress などで使用される KSES におけるクロスサイトスクリプティングの脆弱性 WordPress などで使用される KSES には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-4536 47116 CVE-2010-4536 15788 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003506.html 2010-12-29 2012-03-27 View