CVE-2017-6814

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by both 1 mishandling of the playlist shortcode in the wpplaylistshortcode function in wp-includes/media.php and 2 mishandling of meta information in the renderTracks function ...

PT-2017-17345

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.7.3 Description The issue concerns authenticated Cross-Site Scripting XSS via Media File Metadata. This is demonstrated by the mishandling of the playlist shortcode in the wp playlist shortcode function and the...