CVE-2006-0733

Published: Feb 16, 2006Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or HTML via scriptable attributes such as (1) onfocus and (2) onblur in the "author's website" field. NOTE: followup comments to the researcher's web log suggest that this issue is only exploitable by the same user who injects the XSS, so this might not be a vulnerability

Affected (1)

Products: Wordpress: Wordpress

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Version 2.0

References (8)

http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/425043/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16656

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/24736

Source: cve@mitre.org

http://myimei.com/security/2006-02-15/wordpress200autors-websitexss-attack.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/425043/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16656

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/24736

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.