Unrated severityNVD Advisory· Published Mar 28, 2007· Updated Jun 16, 2026
CVE-2007-1732
CVE-2007-1732
Description
Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the demo parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: another researcher disputes this issue, stating that this is legitimate functionality for administrators. However, it has been patched by at least one vendor
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wordpress:wordpress:2.1.2:*:*:*:*:*:*:*
- (no CPE)range: = 2.1.2
Patches
Vulnerability mechanics
References
6- secunia.com/advisories/24430nvdPermissions RequiredThird Party Advisory
- secunia.com/advisories/24566nvdPermissions RequiredThird Party Advisory
- www.gentoo.org/security/en/glsa/glsa-200703-23.xmlnvdThird Party Advisory
- codex.wordpress.org/Roles_and_CapabilitiesnvdProduct
- marc.infonvdMailing List
- osvdb.org/33884nvdBroken Link
News mentions
0No linked articles in our index yet.