PT-2008-1640 · WordPress · Peter'S Random Anti-Spam Image Plugin

CVE-2007-6677

·

Publicado

2008-01-10

·

Atualizado

2023-08-02

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Peter's Random Anti-Spam Image plugin for WordPress versions 0.2.4 and earlier
Description The issue allows remote attackers to inject arbitrary web script or HTML via the comment field in the "comment form" API endpoint, "/comment". This is due to a cross-site scripting (XSS) vulnerability.
Recommendations For versions 0.2.4 and earlier, update to a version later than 0.2.4 to resolve the issue.

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2007-6677

Produtos afetados

Peter'S Random Anti-Spam Image Plugin