CVE-2008-0203

Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) cryptwidth, (2) cryptheight, (3) bgimg, (4) charR, (5) charG, (6) charB, (7) charclear, (8) tfont, (9) charel, (10) charelc, (11) charelv, (12) charnbmin, (13) charnbmax, (14) charspace, (15) charsizemin, (16) charsizemax, (17) charanglemax, (18) noisepxmin, (19) noisepxmax, (20) noiselinemin, (21) noiselinemax, (22) nbcirclemin, (23) nbcirclemax, or (24) brushsize parameter to wp-admin/options-general.php.

Link	Resource
http://lists.grok.org.uk/pipermail/full-disclosure/2008-January/059439.html	Exploit
http://websecurity.com.ua/1596/
http://securityreason.com/securityalert/3539
http://www.securityfocus.com/archive/1/485786/100/0/threaded

Configuration 1

cpe:2.3:a:wordpress:cryptographp:*:*:*:*:*:*:*:*

---

Published : 2008-01-10 12:46

Updated : 2018-10-15 09:58

---

NVD link : CVE-2008-0203

Mitre link : CVE-2008-0203

Cryptographp

Wordpress

CWE-79