WordPress 'comment' field HTML Injection Vulnerability

WordPress 'comment' field HTML Injection Vulnerability

Release date:
Updated on:

Affected Systems:
WordPress
Description:
Bugtraq id: 71237

WordPress is a blog platform developed in PHP. you can build your own website on servers that support PHP and MySQL databases.

WordPress has the HTML injection vulnerability in the implementation of the 'comment' field. After successful exploitation, attackers can run HTML and script code in the context of the affected browser.

<* Source: Jouko Pynnonen (jouko@iki.fi)
*>

Suggestion:
Vendor patch:

WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://wordpress.org/

This article permanently updates the link address: