[wp-trac] Re: [WordPress Trac] #4720: Users without unfiltered_html capability can post arbitrary html

WordPress Trac wp-trac at lists.automattic.com
Mon Aug 13 05:17:00 GMT 2007


#4720: Users without unfiltered_html capability can post arbitrary html
----------------------+-----------------------------------------------------
 Reporter:  xknown    |        Owner:  anonymous
     Type:  defect    |       Status:  new      
 Priority:  normal    |    Milestone:           
Component:  Security  |      Version:  2.2.2    
 Severity:  normal    |   Resolution:           
 Keywords:            |  
----------------------+-----------------------------------------------------
Comment (by JeremyVisser):

 I can't reproduce on WP 2.2.2. Can you provide exact steps to reproduce
 this? Are you sure this happens on a fresh installation of WordPress?
 Perhaps a plugin is causing this?

 Trunk is definitely not vulnerable, as grepping the source tree doesn't
 return anything for a search of 'no_filter'.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/4720#comment:2>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list