ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2008-4671

Cross-site scripting (XSS) vulnerability in wp-admin/wp-blogs.php in Wordpress MU (WPMU) before 2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) s and (2) ip_address parameters.
-
CVSS
0.0
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
Patch StatusUnavailable

Change Log
DateSourceChangesScore
2026-07-21exploitdbE: U→P0.0 → 0.0
2026-07-21cve.orginitial, patch: Unavailable0.0
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
wordpresswordpress_muAll versions
wordpresswordpress_mu1.0
wordpresswordpress_mu1.2.2
wordpresswordpress_mu1.2.3
wordpresswordpress_mu1.3
wordpresswordpress_mu1.3.1
Published: 2008-10-22