Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

xcms all version arbitrary code execution

Neuron News 1.0 Local file inclusion (index.php)

From:	pagvacito <unknown.pentester_(at)_gmail.com>
Date:	24.09.2007
Subject:	2 vanilla XSS on Wordpress ‘wp-register.php’

There are two vanilla XSS on 'wp-register.php'. Only versions <=2.0.1
appear to be affected.

More info can be found on GNUCITIZEN's BlogSecurity:

http://blogsecurity.net/wordpress/2-vanilla-xss-on-wordpress-wp-registerphp/


Regards,

--
pagvac
gnucitizen.org, ikwt.com