512 matches found
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
DEBIAN-CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
DEBIAN-CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
UBUNTU-CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
UBUNTU-CVE-2019-16219
WordPress before 5.2.3 allows XSS in shortcode previews...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16219
CVE-2019-16219 concerns WordPress core prior to version 5.2.3, where a stored XSS flaw in shortcode previews could allow injection of malicious scripts. The vulnerability arises from improper handling of shortcode previews, enabling an attacker to potentially execute script when a user previews a...
CVE-2019-16223
WordPress Core prior to 5.2.3 is vulnerable to an XSS in post previews when accessed by authenticated users. The root cause involves wp_kses_bad_protocol_once() URL sanitization, which in affected versions can be bypassed via crafted input, enabling arbitrary script execution in the user’s browse...
CVE-2019-16223
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
CVE-2019-16219: Improper Neutralization of Input During Web Page Generation
WordPress before 5.2.3 allows XSS in shortcode previews...
PT-2019-5209 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the shortcode preview functionality of the WordPress content management system, allowing for XSS attacks. This could potentially enable a remote attacker to...
CVE-2019-16223: Improper Neutralization of Input During Web Page Generation
WordPress before 5.2.3 allows XSS in post previews by authenticated users...
PT-2019-5213 · WordPress · Wordpress
Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the content management system of WordPress, allowing for a Cross-Site Scripting XSS attack when authorized users view post previews. This could enable a remote...
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
Description From the WordPress version release: "Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments."...
WordPress 5.2.2 - Cross-Site Scripting (XSS) in Stored Comments
Description From the WordPress version release notes: "Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored...
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
Description According to the WordPress release notes: "Props to Zhouyuan Yang of Fortinet’s FortiGuard Labs who disclosed a vulnerability for cross-site scripting XSS in shortcode previews."...
August 6, 2019, update for Excel 2016 (KB4475550)
None None...
Information Disclosure
Foreman is vulnerable to information disclosure vulnerability. The vulnerability exists in foreman's handling of template previews. Remote authenticated users with permission could view some hosts to obtain sensitive host configuration information via a URL with a hostname...