CVE-2008-5278

Published: Nov 28, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before 2.6.5 allows remote attackers to inject arbitrary web script or HTML via the Host header (HTTP_HOST variable).

Affected (74)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

74 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 2.6.3
Wordpress Wordpress	Version 0.6.2.1
Wordpress Wordpress	Version 0.6.2.1 beta_2
Wordpress Wordpress	Version 0.6.2
Wordpress Wordpress	Version 0.6.2 beta_2
Wordpress Wordpress	Version 0.71-gold
Wordpress Wordpress	Version 0.711
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 0.72
Wordpress Wordpress	Version 0.72 beta1
Wordpress Wordpress	Version 0.72 beta2
Wordpress Wordpress	Version 0.72 rc1
Wordpress Wordpress	Version 0.7
Wordpress Wordpress	Version 1.0-platinum
Wordpress Wordpress	Version 1.0.1-miles
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2-blakey
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.2-delta
Wordpress Wordpress	Version 1.2-mingus
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.2 beta
Wordpress Wordpress	Version 1.3.1
Wordpress Wordpress	Version 1.4
Wordpress Wordpress	Version 1.5-strayhorn
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 1.6
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.10_rc1
Wordpress Wordpress	Version 2.0.10_rc2
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.3
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1.3_rc1
Wordpress Wordpress	Version 2.1.3_rc2
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.1 alpha_3
Wordpress Wordpress	Version 2.2.0
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.2_revision5002
Wordpress Wordpress	Version 2.2_revision5003
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.1 rc1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.3 beta3
Wordpress Wordpress	Version 2.3 rc1
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6