[wp-hackers] XSS Vulnerability reported by a french geek
abrazell at b5media.com
Tue May 29 15:49:08 GMT 2007
I still still still don't see this as an actual flaw. unfiltered_html
is a capability that an administrator should have. If the person has
administrative rights, well they can delete the whole blog. Is that
classified as a security risk too?
Director of Technology, b5media
"A Global New Media Company"
my www: www.technosailor.com
Everything contained in this email is confidential and stuff.
On May 29, 2007, at 11:46 AM, Gali wrote:
> ( 27 / 05 / 2007 )
> versions : 2.2 and previous versions.
> in comments, resulting in an open door to XSS.
> wp-hackers mailing list
> wp-hackers at lists.automattic.com
More information about the wp-hackers