CVE-2006-1263

Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.

Date published : 2006-03-18

http://www.securityfocus.com/bid/17069

http://wordpress.org/development/2006/03/security-202/