CVE-2007-4014

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-26 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) BlixKrieg (Blix Krieg) 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to CVE-2007-2757. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

WordPress Blix: 0.9.1
WordPress Blixed: 1.0
WordPress Blixkrieg: 2.2

References

http://secunia.com/advisories/26109
http://secunia.com/advisories/26115
http://secunia.com/advisories/26116
http://www.osvdb.org/37056
http://www.osvdb.org/37057
http://www.securityfocus.com/bid/24954
https://exchange.xforce.ibmcloud.com/vulnerabilities/35472
https://exchange.xforce.ibmcloud.com/vulnerabilities/35473
https://exchange.xforce.ibmcloud.com/vulnerabilities/35474
http://secunia.com/advisories/26109
http://secunia.com/advisories/26115
http://secunia.com/advisories/26116

Get alerted when CVE-2007-4014 or the next vulnerability affects your stack