CVE-2009-1030

Published: Mar 20, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the choose_primary_blog function in wp-includes/wpmu-functions.php in WordPress MU (WPMU) before 2.7 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host header.

Affected (26)

Products: Wordpress: Wordpress Mu

Wordpress

1 product

Wordpress Mu

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress Mu	Up to 2.6
Wordpress Wordpress Mu	Version 1.0
Wordpress Wordpress Mu	Version 1.0 rc1
Wordpress Wordpress Mu	Version 1.0 rc2
Wordpress Wordpress Mu	Version 1.0 rc3
Wordpress Wordpress Mu	Version 1.0 rc4
Wordpress Wordpress Mu	Version 1.1.1
Wordpress Wordpress Mu	Version 1.1
Wordpress Wordpress Mu	Version 1.2.1
Wordpress Wordpress Mu	Version 1.2.2
Wordpress Wordpress Mu	Version 1.2.3
Wordpress Wordpress Mu	Version 1.2.4
Wordpress Wordpress Mu	Version 1.2.4 rc1
Wordpress Wordpress Mu	Version 1.2.5a
Wordpress Wordpress Mu	Version 1.2
Wordpress Wordpress Mu	Version 1.3.1
Wordpress Wordpress Mu	Version 1.3.2
Wordpress Wordpress Mu	Version 1.3.3
Wordpress Wordpress Mu	Version 1.3
Wordpress Wordpress Mu	Version 1.5.1
Wordpress Wordpress Mu	Version 1.5 rc1
Wordpress Wordpress Mu	Version 2.6.1
Wordpress Wordpress Mu	Version 2.6.2
Wordpress Wordpress Mu	Version 2.6.3
Wordpress Wordpress Mu	Version 2.6.5
Wordpress Wordpress Mu	Version 2.7