CVE-2006-1796

Source
https://cve.org/CVERecord?id=CVE-2006-1796
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2006-1796.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2006-1796
Downstream
Withdrawn
2026-01-27T04:06:33.717880Z
Published
2006-04-17T20:06:00Z
Modified
2026-01-27T04:06:33.717880Z
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($SERVER['REQUESTURI']).

References

Affected packages