Lucene search
+L

10 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•10 views

EUVD-2017-6215

Malware in sbrugna...

6.1CVSS7.6AI score0.02123EPSS
SaveExploits0References6
Veracode
Veracode
•added 2017/09/29 12:33 a.m.•22 views

Cross-site Scripting (XSS)

Wordpress is vulnerable to cross-site scripting XSS attacks. A malicious user can pass a javascript: or data: URL to the link modal to inject and execute arbitrary Javascript...

6.1CVSS7.4AI score0.02123EPSS
SaveExploits0References5Affected Software2
CNVD
CNVD
•added 2017/09/25 12:00 a.m.•30 views

WordPress link modal cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the link modal in WordPress versions prior to 4.8.2. A remote...

6.1CVSS6.8AI score0.02123EPSS
SaveExploits0References1
OSV
OSV
•added 2017/09/23 8:29 p.m.•8 views

DEBIAN-CVE-2017-14718

Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL...

6.1CVSS6.3AI score0.02123EPSS
SaveExploits0References1
Prion
Prion
•added 2017/09/23 8:29 p.m.•15 views

Cross site scripting

Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL...

4.3CVSS6AI score0.02123EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2017/09/23 8:29 p.m.•13 views

UBUNTU-CVE-2017-14718

Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL...

6.1CVSS7.1AI score0.02123EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2017/09/23 8:00 p.m.•48 views

CVE-2017-14718

Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL...

6.1CVSS3.6AI score0.02123EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/23 12:00 a.m.•5 views

CVE-2017-14718: Improper Neutralization of Input During Web Page Generation

Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL...

6.1CVSS7.3AI score0.02123EPSS
SaveExploits0References2
CNVD
CNVD
•added 2017/09/21 12:00 a.m.•7 views

WordPress Link Modal Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress link modal. A remote attacker can exploit this vulnerability to inje...

6.1AI score
SaveExploits0References1
Hacker One
Hacker One
•added 2017/04/28 5:30 a.m.•19 views

WordPress: Self-XSS in WordPress Editor Link Modal

A self-xss was found in the link modal of the WordPress editor and fixed in the WordPress 4.8.2 release. Was a self-xss on the link modal and the WordPress team were very helpful and they made a patch for the bug happy to work with them :...

6.8AI score
SaveExploits0
Rows per page
Query Builder