Vulnerabilities > CVE-2007-4104 - HTML Injection vulnerability in WordPress WP-FeedStats

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
wp-feedstats
exploit available
NVD
Published: 2007-07-31
Updated: 2017-07-29

Summary

Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.

Vulnerable Configurations

Part Description Count
Application
Wp-Feedstats
1

Exploit-Db

descriptionWordPress WP-FeedStats 2.1 HTML Injection Vulnerability. CVE-2007-4104. Webapps exploit for php platform
idEDB-ID:30403
last seen2016-02-03
modified2007-07-26
published2007-07-26
reporterDavid Kierznowski
sourcehttps://www.exploit-db.com/download/30403/
titleWordPress WP-FeedStats 2.1 - HTML Injection Vulnerability

References