Lucene search

CVE-2017-6814

🗓️ 12 Mar 2017 01:00:59Reported by mitreType

WordPress authenticated XSS via Media File Metadata before 4.7.

Reporter	Title	Published	Views	Family All 32
Debian CVE	CVE-2017-6814	12 Mar 201701:59	–	debiancve
Prion	Cross site scripting	12 Mar 201701:59	–	prion
WPVulnDB	WordPress 3.6.0-4.7.2 - Authenticated Cross-Site Scripting (XSS) via Media File Metadata	6 Mar 201700:00	–	wpvulndb
Cvelist	CVE-2017-6814	12 Mar 201701:00	–	cvelist
NVD	CVE-2017-6814	12 Mar 201701:59	–	nvd
OSV	CVE-2017-6814	12 Mar 201701:59	–	osv
OSV	wordpress - security update	17 Mar 201700:00	–	osv
OSV	wordpress - security update	23 Mar 201700:00	–	osv
UbuntuCve	CVE-2017-6814	12 Mar 201700:00	–	ubuntucve
Tenable Nessus	Debian DLA-860-1 : wordpress security update	20 Mar 201700:00	–	nessus

Nvd

Node

wordpress wordpressRange≤4.7.2

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Source	Link
sumofpwn	www.sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html
wordpress	www.wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
securitytracker	www.securitytracker.com/id/1037959
codex	www.codex.wordpress.org/Version_4.7.3
wpvulndb	www.wpvulndb.com/vulnerabilities/8765
openwall	www.openwall.com/lists/oss-security/2017/03/06/8
github	www.github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7
debian	www.debian.org/security/2017/dsa-3815
securityfocus	www.securityfocus.com/bid/96601

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Mar 2017 01:59Current

5.4Medium risk

Vulners AI Score5.4

CVSS23.5

CVSS35.4

EPSS0.002

CWE-79