CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.0. It affects WordPress. It may be remotely exploitable.
CVE
CVE-2007-3238
Severity
MEDIUM
CVSS
6
EPSS
2.00%
WordPress
Original NVD Description
Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via the PATH_INFO (REQUEST_URI) to wp-admin/themes.php, a different vulnerability than CVE-2007-1622. NOTE: this might not cross privilege boundaries in some configurations, since the Administrator role has the unfiltered_html capability.