Skip to content
Saturday, December 6, 2025
Medium Published: Aug 22, 2007 Modified: Apr 09, 2025

CVE-2007-4480

4.3 CVSS SCORE
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Share:

Description

Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

CVSS Vector Details

Attack Vector Network
Attack Complexity M
Confidentiality None
Integrity P
Availability None

Affected Software Configurations

  • a wordpress sirius 1.0 * * * * * * *

Weaknesses (CWE)

  • NVD-CWE-Other