CVE-2007-4104 : Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2

Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.

Published 2007-07-31 10:17:00

Updated 2017-07-29 01:32:43

Source MITRE

View at NVD, CVE.org

Vulnerability category: Cross site scripting (XSS)

Products affected by CVE-2007-4104

Wp-feedstats » Wordpress Plugin
Versions up to, including, (<=) 2.1
cpe:2.3:a:wp-feedstats:wordpress_plugin:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-4104

EPSS FAQ

1.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-4104

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

References for CVE-2007-4104

Jump to

Vulnerability Details : CVE-2007-4104

Products affected by CVE-2007-4104

Exploit prediction scoring system (EPSS) score for CVE-2007-4104

CVSS scores for CVE-2007-4104

References for CVE-2007-4104