CVE-2007-5710 - Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter

Back Back to CVE browser

LOW

Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter

Published Oct 30, 2007

2.6

LOW

CVSS 2.0

EPSS 7.00%

Description

Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (8)

http://osvdb.org/38279
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27407
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://wordpress.org/development/2007/10/wordpress-231/
x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/482905/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26228
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/3640
vdb-entryx_refsource_VUPEN
http://www.waraxe.us/advisory-59.html
x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/38166
vdb-entryx_refsource_XF

Link	Providers	Tags
http://osvdb.org/38279		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/27407		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://wordpress.org/development/2007/10/wordpress-231/		x_refsource_CONFIRMPatch
http://www.securityfocus.com/archive/1/482905/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/26228		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/3640		vdb-entryx_refsource_VUPEN
http://www.waraxe.us/advisory-59.html		x_refsource_MISC
https://exchange.xforce.ibmcloud.com/vulnerabilities/38166		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 30, 2007

Updated Aug 7, 2024

Reserved Oct 30, 2007

Link CVE-2007-5710

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-5710

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-5710