CVE-2008-4733 WP Comment Remix <= 1.4.3 - SQL Injection
MediumCVSS 4.3
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pressography wp comment remix plugin | <= 1.4.3 | No fix listed |
| pressography wp comment remix plugin | = 1.4 | No fix listed |
| wordpress wp-comment-remix(WordPress) | < 1.4.4 | 1.4.4 |
References
- chxsecurity.org
- 32253 third-party-advisory vendor-advisory
- 4492 third-party-advisory
- 20081014 WP Comment Remix 1.4.3 Multiple Vulnerabilities mailing-list
- 31750 exploit vdb-entry
- wpcommentremix-wpcommentremix-xss(45861) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org