oss-sec mailing list archives

CVE Request -- WordPress


From: Jan Lieskovsky <jlieskov () redhat com>
Date: Tue, 21 Jul 2009 11:16:16 +0200

Hello Steve, vendors,

  latest WordPress 2.8.2 version has addressed a XSS vulnerability:

    XSS via unescaped HTML URLs as author comments in the admin page
    
    References:
    -----------
    http://wordpress.org/development/2009/07/wordpress-2-8-2/
    http://bugs.gentoo.org/show_bug.cgi?id=278492


Could you please allocate a CVE identifier for it?

Thanks && Regards, Jan.
--
Jan iankko Lieskovsky / Red Hat Security Response Team



Current thread: