Lucene search
Rahul Pratap SinghPATCHSTACK:3C57D87AC3A0B60B31DF61919E0DA7CAHistoryNov 29, 2017 - 12:00 a.m.
WordPress 4.3.0-4.9 - HTML Language Attribute Escaping
2017-11-2900:00:00
Rahul Pratap Singh
patchstack.com
12
0.001 Low
EPSS
Percentile
40.2%
WordPress does not properly escape the lang attribute of an HTML element in In wp-includes/general-template.php, which might allow an attacker to exploit XSS via the language setting of a site.
Solution
Update WordPress to v4.9.1.
Related
veracode
veracode
Cross-site Scripting (XSS)
2017-12-04 04:12:03
cvelist
cvelist
CVE-2017-17093
2017-12-02 06:00:00
nvd
nvd
CVE-2017-17093
2017-12-02 06:29:00
ubuntucve
ubuntucve
CVE-2017-17093
2017-12-02 00:00:00
debiancve
debiancve
CVE-2017-17093
2017-12-02 06:29:00
cve
cve
CVE-2017-17093
2017-12-02 06:29:00
prion
prion
Design/Logic Flaw
2017-12-02 06:29:00
wpvulndb
wpvulndb
WordPress 4.3.0-4.9 - HTML Language Attribute Escaping
2017-11-29 00:00:00
osv
osv
CVE-2017-17093
2017-12-02 06:29:00
wordpress - security update
2017-12-21 00:00:00
wordpress - security update
2018-01-17 00:00:00
openvas
openvas
WordPress < 4.9.1 Multiple Vulnerabilities - Linux
2017-12-04 00:00:00
WordPress < 4.9.1 Multiple Vulnerabilities - Windows
2017-12-04 00:00:00
Debian: Security Advisory (DLA-1216-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 1216-1] wordpress security update
2017-12-21 20:10:37
[SECURITY] [DSA 4090-1] wordpress security update
2018-01-17 13:40:59
[SECURITY] [DSA 4090-1] wordpress security update
2018-01-17 13:40:59
nessus
nessus
Debian DLA-1216-1 : wordpress security update
2017-12-26 00:00:00
WordPress < 4.9.1 Multiple Vulnerabilities
2017-12-04 00:00:00
Debian DSA-4090-1 : wordpress - security update
2018-01-18 00:00:00