CVE-2010-5295

Publication date 21 January 2014

Last updated 24 July 2024

Ubuntu priority

Description

Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is not properly handled during a Delete Plugin action.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
wordpress	13.10 saucy	Not affected
	13.04 raring	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Ignored end of life

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://core.trac.wordpress.org/changeset/16373
http://codex.wordpress.org/Version_3.0.2
https://www.cve.org/CVERecord?id=CVE-2010-5295