CVE-2008-4733

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
pressographywp_comment_remix_plugin
𝑥
≤ 1.4.3
pressographywp_comment_remix_plugin
1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://chxsecurity.org/advisories/adv-3-full.txt
http://secunia.com/advisories/32253
http://securityreason.com/securityalert/4492
http://www.securityfocus.com/archive/1/497313/100/0/threaded
http://www.securityfocus.com/bid/31750
https://exchange.xforce.ibmcloud.com/vulnerabilities/45861
http://chxsecurity.org/advisories/adv-3-full.txt
http://secunia.com/advisories/32253
http://securityreason.com/securityalert/4492
http://www.securityfocus.com/archive/1/497313/100/0/threaded
http://www.securityfocus.com/bid/31750
https://exchange.xforce.ibmcloud.com/vulnerabilities/45861