Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2.5a does not properly verify the unfiltered_html privilege, which allows remote attackers to conduct cross-site scripting (XSS) attacks via modified data to (1) post.php or (2) page.php with a no_filter field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Unfiltered_HTML字段名称HTML代码注入漏洞
Vulnerability Description
WordPress是一款免费的论坛Blog系统。 WordPress在过滤用户数据时存在漏洞，远程攻击者可能利用此漏洞执行跨站脚本攻击。 远程攻击者可以通过添加名为no_filter的字段绕过unfiltered_html权限功能，这允许没有unfiltered_html权限的用户通过提交特制的POST请求在博客中注入任意HTML和脚本代码。
CVSS Information
N/A
Vulnerability Type
N/A