[wp-trac] Re: [WordPress Trac] #4689: Wordpress uploads.php Cross-Site Scripting Vulnerability

WordPress Trac wp-trac at lists.automattic.com
Fri Aug 3 18:37:47 GMT 2007


#4689: Wordpress uploads.php Cross-Site Scripting Vulnerability
-----------------------------+----------------------------------------------
 Reporter:  BenjaminFlesch   |        Owner:  Nazgul
     Type:  enhancement      |       Status:  closed
 Priority:  highest omg bbq  |    Milestone:  2.2.2 
Component:  Security         |      Version:  2.2.1 
 Severity:  critical         |   Resolution:  fixed 
 Keywords:  has-patch        |  
-----------------------------+----------------------------------------------
Comment (by hendry):

 I assume 2.0.11 is not vulnerable as it does not have wp-admin/upload.php

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4689#comment:8>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list