WordPress 5.2.x < 5.2.3 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

WordPress 4.1.x < 4.1.27 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability in post previews by contributors. - A cross-site scripting XSS vulnerability in stored comments. - An unspecified issue with...

DEBIAN-CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

DEBIAN-CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

UBUNTU-CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

UBUNTU-CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

CVE-2019-16219

CVE-2019-16219 concerns WordPress core prior to version 5.2.3, where a stored XSS flaw in shortcode previews could allow injection of malicious scripts. The vulnerability arises from improper handling of shortcode previews, enabling an attacker to potentially execute script when a user previews a...

CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

CVE-2019-16223

WordPress Core prior to 5.2.3 is vulnerable to an XSS in post previews when accessed by authenticated users. The root cause involves wp_kses_bad_protocol_once() URL sanitization, which in affected versions can be bypassed via crafted input, enabling arbitrary script execution in the user’s browse...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2019-16219: Improper Neutralization of Input During Web Page Generation

WordPress before 5.2.3 allows XSS in shortcode previews...

CVE-2019-16223: Improper Neutralization of Input During Web Page Generation

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

PT-2019-5209 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the shortcode preview functionality of the WordPress content management system, allowing for XSS attacks. This could potentially enable a remote attacker to...

PT-2019-5213 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.2.3 Description: The issue is related to an error in the content management system of WordPress, allowing for a Cross-Site Scripting XSS attack when authorized users view post previews. This could enable a remote...

WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews

Description From the WordPress version release: "Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting XSS vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments."...