Unscored severity · published Aug 22, 2007
CVE-2007-4481
Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or…
–
CVSS
1.8%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BL
Blix · Wordpress
0.9.1; 0.9.1_rus · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4481
securityvulns.ru
http://securityvulns.ru/Rdocument825.html
websecurity.com.ua
http://websecurity.com.ua/1248/
www.securityfocus.com
http://www.securityfocus.com/archive/1/477253/100/0/threaded
More from Blix
–
CVE-2007-4014
Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for…