Linux Distros Unpatched Vulnerability : CVE-2016-7168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the mediahandleupload function in wp- admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers ...

PT-2024-11034 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite WordPress plugin versions prior to 1.9.1.5 Description: The issue allows unauthenticated users to upload arbitrary files to the web server due to the lack of authorization and file checking in the p3dlite handle upload AJAX actio...

DEBIAN-CVE-2016-7168

Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...

Cross site scripting

Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...

PT-2017-9098

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.6.1 Description A cross-site scripting XSS issue exists due to a vulnerability in the media handle upload function. This could allow remote attackers to inject arbitrary web script or HTML by tricking an...