Cross-site scripting (XSS) vulnerability in wp-comments-post.php in WordPress 3.3.x before 3.3.1, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. Public exploit code available.
WordPress
PHP
XSS
NVD
CVSS 2.0
2.6
EPSS
0.6%