CVE:CVE-2007-4014
CNNVD:CNNVD-200707-455
WordPress的与(1)Blix 0.9.1,(2)Blixed 1.0,以及(3)BlixKrieg (Blix Krieg) 2.2主题相关的安装脚本的某个index.php中存在跨站脚本攻击漏洞。远程攻击者可以借助s参数，注入任意web脚本或HTML。该漏洞可能与CVE-2007-2757相关。
solution:Upgrade wordpress blix to a higher version than 0.9.1,and avoid the version 0.9.1; Upgrade wordpress blixed to a higher version than 1.0,and avoid the version 1.0; Upgrade wordpress blixkrieg to a higher version than 2.2,and avoid the version 2.2