Bug 166680

Summary:	www-apps/wordpress <= 2.0.7 templates.php XSS
Product:	Gentoo Security	Reporter:	Executioner <keith>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	web-apps
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
URL:	http://www.securityfocus.com/bid/22534
Whiteboard:
Package list:		Runtime testing required:	---

Description Executioner 2007-02-13 16:42:07 UTC

Here is another one, snore.

WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user. This may help the attacker steal cookie-based authentication credentials and launch other attacks.



Reproducible: Didn't try




http://downloads.securityfocus.com/vulnerabilities/exploits/22534.html

Comment 1 Raphael Marichez (Falco) (RETIRED) gentoo-dev

2007-02-13 23:28:34 UTC

There is another open security bug for WordPress, they will be handled simultaneously.

*** This bug has been marked as a duplicate of bug 163817 ***