521 matches found
CVE-2020-11025 Authenticated cross-site scripting (XSS) in WordPress Customizer
In affected versions of WordPress, a cross-site scripting XSS vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a min...
CVE-2020-11025
In affected versions of WordPress, a cross-site scripting XSS vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a min...
CVE-2020-11025
Summary of CVE-2020-11025 : In affected WordPress versions, there is an authenticated XSS vulnerability in the Customizer navigation section that allows JavaScript execution. The issue is due to improper input handling in the navigation UI and requires an authenticated user to exploit. It has bee...
CVE-2020-11025
In affected versions of WordPress, a cross-site scripting XSS vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a min...
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
Description Authenticated users could corrupt JSON data in the Customizer of other users' to inject malicious JavaScript...
CVE-2020-11025: Improper Neutralization of Input During Web Page Generation
In affected versions of WordPress, a cross-site scripting XSS vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a min...
PT-2020-3600 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33 Description: A cross-site scripting XSS vulnerability in t...
Cross-Site Scripting (XSS)
wordpress is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the Customizer...
DEBIAN-CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
Cross site scripting
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
UBUNTU-CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
CVE-2019-17674 affects WordPress prior to 5.2.4, enabling stored XSS via the Customizer. The issue is triggered by input handled in the Customizer and can be exploited by an attacker to inject scripts that persist across sessions. The provided connected documents confirm the WordPress version aff...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...
CVE-2019-17674
WordPress before 5.2.4 is vulnerable to stored XSS cross-site scripting via the Customizer...