vulnwire
4.3med

CVE-2007-10491 exploit

Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for Wo…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.5%
percentile 94%
Public exploits
1
Exploit-DB

Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable.

Exploit prediction (EPSS)

6.47% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-29598 WordPress Core 1.x/2.0.x - 'Templates.php' Cross-Site Scripting · webapps · 2007-02-12

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Technology feeds
WordPress (RSS, critical only)

References

  • trac.wordpress.org /changeset/4876 · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/24306 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • trac.wordpress.org /changeset/4877 · x_refsource_CONFIRM, x_transferred
  • vupen.com /english/advisories/2007/0741 · vdb-entry, x_refsource_VUPEN, x_transferred
  • osvdb.org /33766 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/22534 · vdb-entry, x_refsource_BID, x_transferred
  • downloads.securityfocus.com /vulnerabilities/exploits/22534.html · x_refsource_MISC, x_transferred
  • secunia.com /advisories/24566 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • gentoo.org /security/en/glsa/glsa-200703-23.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • trac.wordpress.org /ticket/3781 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.