CVE-2007-4014

CVE Database · CVE-2007-4014

CVE-2007-4014

· N/AModified

CVSS v3.1

N/A

EPSS

2.96%

Published

Jul 25, 2007

Modified

Apr 22, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Products (3)

wordpress · blixvulnerable

wordpress · blixedvulnerable

wordpress · blixkriegvulnerable

References (18)

http://secunia.com/advisories/26109

Vendor Advisory

http://secunia.com/advisories/26115

Vendor Advisory

http://secunia.com/advisories/26116

Vendor Advisory

http://www.osvdb.org/37056