CVE:CVE-2011-3863
CNNVD:CNNVD-201109-601
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress的RedLine theme 1.66之前的版本中存在跨站脚本攻击漏洞。远程攻击者可借助s参数注入任意web脚本或者HTML。
solution:Upgrade post-scriptum redline to a higher version than 1.65,0.2.1,0.2.2,0.2.3,0.2.5,0.2.6,0.2.7,0.2.7.1,0.2.9,0.3,0.5,0.5.5,0.7,0.7.1,0.7.5,0.8,0.85,0.90,1.0,1.0.1,1.0.3,1.1,1.2,1.5,1.6,and avoid the version (,1.65],0.2.1,0.2.2,0.2.3,0.2.5,0.2.6,0.2.7,0.2.7.1,0.2.9,0.3,0.5,0.5.5,0.7,0.7.1,0.7.5,0.8,0.85,0.90,1.0,1.0.1,1.0.3,1.1,1.2,1.5,1.6
solution:Upgrade docebo docebolms to a higher version than 4.0.4,and avoid the version 4.0.4