CVE-2011-0700

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via…

published March 14, 2011

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit title (aka post title or post_title), (2) post_status, (3) comment_status, (4) ping_status, and (5) escaping of tags within the tags meta box.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02669 · 85.5th percentile
Published
2011-03-14T19:00Z
EPSS history
Timeline
  • 14 MAR 19:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via…
    cvelistv5