Lucene search

K
patchstackAndrew NacinPATCHSTACK:D29ACE8F9E7925629C5A973C408B7FCE
HistoryJun 14, 2012 - 12:00 a.m.

WordPress <= 3.4.1 - XSS and BYPASS

2012-06-1400:00:00
Andrew Nacin
patchstack.com
3

0.003 Low

EPSS

Percentile

70.8%

Because of these vulnerabilities, authenticated users can perform cross-site scripting attacks by leveraging the Administrator or Editor role and composing crafted text and bypass intended access restrictions.

Solution

           Update WordPress. 
CPENameOperatorVersion
wordpressle3.4.1

0.003 Low

EPSS

Percentile

70.8%

Related for PATCHSTACK:D29ACE8F9E7925629C5A973C408B7FCE