469 matches found
WordPress 3.8.x < 3.8.30 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...
WordPress 5.0.x < 5.0.6 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...
WordPress 4.9.x < 4.9.11 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
DEBIAN-CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
DEBIAN-CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
UBUNTU-CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
UBUNTU-CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16219
CVE-2019-16219 concerns WordPress core prior to version 5.2.3, where a stored XSS flaw in shortcode previews could allow injection of malicious scripts. The vulnerability arises from improper handling of shortcode previews, enabling an attacker to potentially execute script when a user previews a...
CVE-2019-16223
WordPress Core prior to 5.2.3 is vulnerable to an XSS in post previews when accessed by authenticated users. The root cause involves wp_kses_bad_protocol_once() URL sanitization, which in affected versions can be bypassed via crafted input, enabling arbitrary script execution in the user’s browse...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
PT-2019-5209 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the shortcode preview functionality of the WordPress content management system, allowing for XSS attacks. This could potentially enable a remote attacker to...
PT-2019-5213 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the content management system of WordPress, allowing for a Cross-Site Scripting XSS attack when authorized users view post previews. This could enable a remote...
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Description From the WordPress version release: "Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments."...
WordPress 5.2.2 - Cross-Site Scripting (XSS) in Stored Comments
Description From the WordPress version release notes: "Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored...
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Description According to the WordPress release notes: "Props to Zhouyuan Yang of Fortinet’s FortiGuard Labs who disclosed a vulnerability for cross-site scripting XSS in shortcode previews."...
