CVE-2007-5105
EPSS 1.7%Published: 9/26/2007Modified: 5/27/2026
Description
Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the user_email parameter.
Affected packages (1)
- Debian/wordpressfrom 0, < 2.0.4-1