NetSight
IP …
medium4.3

CVE-2005-2107

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML …

Impact

Multiple cross-site scripting (XSS) vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p or (2) comment parameter.

Affected products

VendorProductAffected versions
WordpressWordpress
Versions 1.0, 1.0.1, 1.0.2, 1.2, 1.5, 1.5.1

References