Unscored severity · published Aug 7, 2007
CVE-2007-4166
Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757, CVE-2007-4014, and CVE-2007-4165. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UT
Unamed Theme · Wordpress
1.217 · source: NVD
UT
Unamed Theme SE · Wordpress
1.02 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4166
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4166
osvdb.org
http://osvdb.org/36604
Vendor Advisory
http://secunia.com/advisories/26321
www.securityfocus.com
http://www.securityfocus.com/bid/25215
xuyiyang.com
http://xuyiyang.com/2007/06/29/unnamed-1-217/
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/35821