Log out
Get PRO

Latest

Input validation vulnerability in Pool 1.0.7

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 13, 2007

The Pool theme for the website building platform WordPress has a security vulnerability. It is called Reflected Cross-Site Scripting. This vulnerability exists in versions of the Pool theme up to 1.0.7 and it is caused by a lack of protection that keeps malicious code from being inserted into the theme. Attackers can use this vulnerability to slip harmful scripts into webpages and trick users into clicking on things that can cause damage.

Detected in:

Pool fixed vulnerable versions: >= * <= 1.0.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.