EDB-9250

functional

WordPress Core 2.8.1 - 'url' Cross-Site Scripting

view exploit source exploit_dbverifiedtype webappsauthor superfreakaz0rzpublished 2009-07-24catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2009-2851USmedium4.3Exploit
Cross-site scripting (XSS) vulnerability in the administrator interface in WordPress before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via a comment autho…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan