CVE-2004-1584

CVE-2004-1584 describes a CRLF injection vulnerability in wp-login.php of WordPress version 1.2. This flaw allows remote, unauthenticated attackers to perform HTTP Response Splitting attacks by manipulating the 'text' parameter, potentially modifying the HTML content returned to users. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and impact limited to partial integrity compromise. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.