Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Wordpress All versions XSS
May 02 2007 12:11AM
jcarlos norte gmail com
Advisory by Jose Carlos Norte
Wordpress is vulnerable to XSS attacks when custom 404 pages are used by the template.
The problem (sidebar.php):
<form method="get" id="searchform" action="<?php echo $_SERVER['PHP_SELF']; ?>">
if wordpress template use custom 404 pages, like:
<?php get_header();...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
Wordpress is vulnerable to XSS attacks when custom 404 pages are used by the template.
The problem (sidebar.php):
<form method="get" id="searchform" action="<?php echo $_SERVER['PHP_SELF']; ?>">
if wordpress template use custom 404 pages, like:
<?php get_header();...
[ more ]