Lucene search
K

12 matches found

NVD
NVD
added 2016/05/22 1:59 a.m.21 views

CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

5.4CVSS5.4AI score0.0029EPSS
Exploits0References8
OSV
OSV
added 2016/05/22 1:59 a.m.4 views

DEBIAN-CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

5.4CVSS6.2AI score0.0029EPSS
Exploits0References1
Prion
Prion
added 2016/05/22 1:59 a.m.29 views

Cross site scripting

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

3.5CVSS5.5AI score0.30646EPSS
Exploits2References8Affected Software1
OSV
OSV
added 2016/05/22 1:59 a.m.0 views

UBUNTU-CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

5.4CVSS6.5AI score0.0029EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2016/05/22 1:59 a.m.24 views

CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

5.4CVSS6.3AI score0.0029EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2016/05/22 1:59 a.m.6 views

CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

6.1CVSS5.7AI score0.30646EPSS
Exploits2References10
CVE
CVE
added 2016/05/22 1:0 a.m.89 views

CVE-2015-7989

CVE-2015-7989 is a WordPress XSS vulnerability affecting versions before 4.3.1, triggered by a crafted email address in the user list table. The root cause is cross-site scripting via manipulated input, allowing remote authenticated users to inject script/html. The vulnerability is fixed in WordP...

5.4CVSS5.3AI score0.0029EPSS
Exploits0References8Affected Software1
Debian CVE
Debian CVE
added 2016/05/22 1:0 a.m.33 views

CVE-2015-7989

Cross-site scripting XSS vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714...

5.4CVSS5.4AI score0.0029EPSS
Exploits0
CNVD
CNVD
added 2015/11/01 12:0 a.m.1 views

WordPress User List Table Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. WordPress fails to adequately filter user-submitted input, allowing remote attackers to exploit vulnerabilities to inject malicious scripts or HTML code that can capture sensitive...

6.8AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2015/09/17 12:0 a.m.142 views

WordPress < 4.3.1 Multiple Vulnerabilities

According to its version number, the WordPress application running on the remote web server is prior to 4.3.1. It is, therefore, potentially affected by multiple vulnerabilities : - A cross-site scripting vulnerability exists when processing shortcode tags due to improper validation of...

6.1CVSS6.6AI score0.30646EPSS
Exploits2References6
Tenable Nessus
Tenable Nessus
added 2015/09/16 12:0 a.m.35 views

FreeBSD : wordpress -- multiple vulnerabilities (f4ce64c2-5bd4-11e5-9040-3c970e169bc2)

Samuel Sidler reports : WordPress 4.3.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. - WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags...

6.1CVSS5.7AI score0.30646EPSS
Exploits2References6
FreeBSD
FreeBSD
added 2015/09/15 12:0 a.m.46 views

wordpress -- multiple vulnerabilities

Samuel Sidler reports: WordPress 4.3.1 is now available. This is a security release for all previous versions and we strongly encourage you to update your sites immediately. WordPress versions 4.3 and earlier are vulnerable to a cross-site scripting vulnerability when processing shortcode tags...

6.1CVSS5.6AI score0.30646EPSS
Exploits2References2
Rows per page
Query Builder