{"api_version":"1","generated_at":"2026-07-23T09:19:27+00:00","cve":"CVE-2007-4481","urls":{"html":"https://cve.report/CVE-2007-4481","api":"https://cve.report/api/cve/CVE-2007-4481.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-4481","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-4481"},"summary":{"title":"CVE-2007-4481","description":"Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).","state":"PUBLISHED","assigner":"mitre","published_at":"2007-08-22 23:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/477253/100/0/threaded","name":"http://www.securityfocus.com/archive/1/477253/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://websecurity.com.ua/1248/","name":"http://websecurity.com.ua/1248/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"XSS в темах Blix та Blix Rus для WordPress - Websecurity - Веб безпека","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityvulns.ru/Rdocument825.html","name":"http://securityvulns.ru/Rdocument825.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Vulnerability in theme Blix 0.9.1 for WordPress","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-4481","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-4481","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"4481","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"blix","cpe6":"0.9.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"4481","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"blix","cpe6":"0.9.1_rus","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T14:53:56.151Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://websecurity.com.ua/1248/"},{"name":"20070821 Vulnerabilities digest","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/477253/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://securityvulns.ru/Rdocument825.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-08-21T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF)."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://websecurity.com.ua/1248/"},{"name":"20070821 Vulnerabilities digest","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/477253/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://securityvulns.ru/Rdocument825.html"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-4481","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://websecurity.com.ua/1248/","refsource":"MISC","url":"http://websecurity.com.ua/1248/"},{"name":"20070821 Vulnerabilities digest","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/477253/100/0/threaded"},{"name":"http://securityvulns.ru/Rdocument825.html","refsource":"MISC","url":"http://securityvulns.ru/Rdocument825.html"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-4481","datePublished":"2007-08-22T23:00:00.000Z","dateReserved":"2007-08-22T00:00:00.000Z","dateUpdated":"2024-08-07T14:53:56.151Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-08-22 23:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:blix:0.9.1:*:*:*:*:*:*:*","matchCriteriaId":"0D18C857-87A8-4470-8370-5F3F59508EAC"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:blix:0.9.1_rus:*:*:*:*:*:*:*","matchCriteriaId":"6BE5F26F-51DB-42EA-BE8D-9C8276973281"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"4481","Ordinal":"1","Title":"CVE-2007-4481","CVE":"CVE-2007-4481","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"4481","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).","Type":"Description","Title":"CVE-2007-4481"},{"CveYear":"2007","CveId":"4481","Ordinal":"2","NoteData":"2007-08-22","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"4481","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}