Lucene search
N/APATCHSTACK:46CE5C80BCC93BDC026535207F8C7D76HistoryAug 04, 2015 - 12:00 a.m.
WordPress <= 4.2.3 - XSS #2
2015-08-0400:00:00
N/A
patchstack.com
8
0.013 Low
EPSS
Percentile
86.1%
This vulnerability exists in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in the “form” function. It allows remote attackers to inject arbitrary web script or HTML via a widget title.
Related records:
http://db.threatpress.com/vulnerability/wordpress/wordpress-4-2-3-xss
Solution
Update WordPress.
Related
ubuntucve
ubuntucve
CVE-2015-5732
2015-11-09 00:00:00
cve
cve
CVE-2015-5732
2015-11-09 11:59:04
debiancve
debiancve
CVE-2015-5732
2015-11-09 11:59:04
cvelist
cvelist
CVE-2015-5732
2015-11-09 11:00:00
prion
prion
Cross site scripting
2015-11-09 11:59:00
nvd
nvd
CVE-2015-5732
2015-11-09 11:59:04
wpvulndb
wpvulndb
WordPress <= 4.2.3 - Widgets Title Cross-Site Scripting (XSS)
2015-08-05 00:00:00
debian
debian
[SECURITY] [DLA 294-1] wordpress security update
2015-08-19 12:58:59
[SECURITY] [DSA 3332-1] wordpress security update
2015-08-11 19:55:16
[SECURITY] [DSA 3383-1] wordpress security update
2015-10-29 20:02:31
nessus
nessus
Debian DLA-294-1 : wordpress security update
2015-08-20 00:00:00
WordPress < 4.2.4 Multiple Vulnerabilities
2015-12-17 00:00:00
Fedora 23 : wordpress-4.2.4-1.fc23 (2015-12750)
2015-08-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-294-1)
2023-03-08 00:00:00
Mageia: Security Advisory (MGASA-2015-0309)
2022-01-28 00:00:00
WordPress Multiple Vulnerabilities (Dec 2015) - Linux
2015-12-15 00:00:00
osv
osv
wordpress - security update
2015-08-19 00:00:00
wordpress - security update
2015-08-11 00:00:00
wordpress - regression update
2015-08-11 00:00:00
archlinux
archlinux
wordpress: multiple issues
2015-08-07 00:00:00
freebsd
freebsd
wordpress -- Multiple vulnerability
2015-08-04 00:00:00
mageia
mageia
Updated wordpress package fixes security vulnerability
2015-08-10 17:31:41
securityvulns
securityvulns
WiFi Pineapple protection bypass
2015-08-24 00:00:00
[SECURITY] [DSA 3332-1] wordpress security update
2015-08-24 00:00:00