CVE-2007-4104

State: Published
Severity: Not scored
Published: Jul 31, 2007
Updated: Aug 7, 2024
Reserved: Jul 31, 2007

Description

Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20070726 WordPress wp-feedstats persistent XSSmailing-list
25085vdb-entry
http://blogsecurity.net/wordpress/news-260707/
http://bueltge.de/plugin-wp-feedstats-in-neuer-version/481/
37259vdb-entry
26249third-party-advisory
wordpress-wpfeedstats-xss(35646)vdb-entry
http://blogsecurity.net/news/news-130707/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.