CVE-2011-0700

Summary

CVE	CVE-2011-0700
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2011-03-14 19:55:00 UTC
Updated	2026-04-29 01:13:23 UTC
Description	Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.0.5 allow remote authenticated users to inject arbitrary web script or HTML via vectors related to (1) the Quick/Bulk Edit title (aka post title or post_title), (2) post_status, (3) comment_status, (4) ping_status, and (5) escaping of tags within the tags meta box.

Risk And Classification

Primary CVSS: v2.0 3.5 from [email protected]

AV:N/AC:M/Au:S/C:N/I:P/A:N

Problem Types: CWE-79 | n/a

CVSS v2.0 Breakdown

Access Vector

Network

Access Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

None

AV:N/AC:M/Au:S/C:N/I:P/A:N

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Wordpress	Wordpress	All	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Na	N/a	affected n/a	Not specified

References

Reference	Source	Link	Tags
403 Forbidden	af854a3a-2127-422b-91ae-364da2661108	core.trac.wordpress.org	Patch, Vendor Advisory
403 Forbidden	af854a3a-2127-422b-91ae-364da2661108	core.trac.wordpress.org	Patch, Vendor Advisory
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	af854a3a-2127-422b-91ae-364da2661108	www.vupen.com	Third Party Advisory
Version 3.0.5 « WordPress Codex	af854a3a-2127-422b-91ae-364da2661108	codex.wordpress.org	Patch, Vendor Advisory
Malformed Request	af854a3a-2127-422b-91ae-364da2661108	www.securityfocus.com	Third Party Advisory, VDB Entry
oss-security - CVE request: wordpress before 3.0.5	af854a3a-2127-422b-91ae-364da2661108	openwall.com	Mailing List, Third Party Advisory
oss-security - Re: CVE request: wordpress before 3.0.5	af854a3a-2127-422b-91ae-364da2661108	openwall.com	Mailing List, Third Party Advisory
403 Forbidden	af854a3a-2127-422b-91ae-364da2661108	core.trac.wordpress.org	Patch, Vendor Advisory
WordPress › WordPress 3.0.5 (and 3.1 Release Candidate 4)	af854a3a-2127-422b-91ae-364da2661108	www.wordpress.org	Patch, Vendor Advisory
[SECURITY] Fedora 13 Update: wordpress-3.1-1.fc13	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org	Third Party Advisory
[SECURITY] Fedora 15 Update: wordpress-3.1-1.fc15	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org	Third Party Advisory
Debian update for wordpress - Secunia.com	af854a3a-2127-422b-91ae-364da2661108	secunia.com	Third Party Advisory
Webmail : Solution de messagerie professionnelle - OVHcloud- OVH	af854a3a-2127-422b-91ae-364da2661108	www.vupen.com	Third Party Advisory
403 Forbidden	af854a3a-2127-422b-91ae-364da2661108	core.trac.wordpress.org	Patch, Vendor Advisory
Debian -- Security Information -- DSA-2190-1 wordpress	af854a3a-2127-422b-91ae-364da2661108	www.debian.org	Third Party Advisory
[SECURITY] Fedora 14 Update: wordpress-3.1-1.fc14	af854a3a-2127-422b-91ae-364da2661108	lists.fedoraproject.org	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

There are currently no legacy QID mappings associated with this CVE.