5 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-7168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the mediahandleupload function in wp- admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers ...
DEBIAN-CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
Cross site scripting
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
CVE-2016-7168
Cross-site scripting XSS vulnerability in the mediahandleupload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename...
PT-2017-9098
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.6.1 Description A cross-site scripting XSS issue exists due to a vulnerability in the media handle upload function. This could allow remote attackers to inject arbitrary web script or HTML by tricking an...