CVEvulnerability
CVE-2008-4733
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-10-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.
Affected configurations
• pressography wp comment remix plugin (<= 1.4.3)
• pressography wp comment remix plugin 1.4
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://chxsecurity.org/advisories/adv-3-full.txt chxsecurity.org
- http://secunia.com/advisories/32253 Vendor Advisory
- http://securityreason.com/securityalert/4492 securityreason.com
- http://www.securityfocus.com/archive/1/497313/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31750 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45861 exchange.xforce.ibmcloud.com
- http://chxsecurity.org/advisories/adv-3-full.txt chxsecurity.org
- http://secunia.com/advisories/32253 Vendor Advisory
- http://securityreason.com/securityalert/4492 securityreason.com
- http://www.securityfocus.com/archive/1/497313/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31750 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45861 exchange.xforce.ibmcloud.com