BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Wordpress <= v2.1.0 Mar 05 2007 12:55AM
ciri virtuax be
If you're logged in into wordpress as an admin, your comments aren't properly sanitized, thus allowing an XSS to be posted. This can be exploited using XSRF techniques.

More info & PoC: http://www.virtuax.be/advisories/Advisory4-20022007.txt
...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus