CVE:CVE-2008-0204
CNNVD:CNNVD-200801-139
Math Comment Spam Protection 2.1以及WordPress plugin之前版本下的math-comment-spam-protection.php中的多个跨站脚本漏洞允许远程攻击者借助(1)mcsp_opt_msg_no_answer或者(2)mcsp_opt_msg_wrong_answer parameter to wp-admin/options-general.php注入任意的文件脚本或HTML。
solution:Upgrade wordpress math_comment_spam_protection_plugin to a higher version than 2.1,and avoid the version (,2.1]