Unscored severity · published Jul 26, 2007
CVE-2007-4014
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Blix · Wordpress
0.9.1 · source: NVD
BL
Blixed · Wordpress
1.0 · source: NVD
BL
Blixkrieg · Wordpress
2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4014
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4014
Vendor Advisory
http://secunia.com/advisories/26109
Vendor Advisory
http://secunia.com/advisories/26115
Vendor Advisory
http://secunia.com/advisories/26116
www.osvdb.org
http://www.osvdb.org/37056
www.osvdb.org
http://www.osvdb.org/37057
www.securityfocus.com
http://www.securityfocus.com/bid/24954
More from Blix
–
CVE-2007-4481
Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or…