CVE-2007-5710
EPSS 7.0%
Description
Cross-site scripting (XSS) vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the posts_columns array parameter.
How to fix CVE-2007-5710
To remediate CVE-2007-5710, upgrade the affected package to a fixed version below.
- Debian/wordpress—upgrade to 2.3.1-1 or later
Is CVE-2007-5710 being exploited?
Moderate — EPSS is 7.0%. Track this CVE but it's not at the top of the prioritisation list.
Affected packages (1)
- from 0, < 2.3.1-1