CVE-2007-2627

Source
https://cve.org/CVERecord?id=CVE-2007-2627
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2007-2627.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2007-2627
Downstream
CGA (4)
DEBIAN (1)
MINI (2)
Related
Published
2007-05-11T17:19:00Z
Modified
2026-04-10T03:38:51Z
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622.

References

Affected packages