Lucene search
+L

5 matches found

Mend
Mend
•added 2016/05/22 1:00 a.m.•7 views

CVE-2015-8834

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an...

6.1CVSS0.01784EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/22 12:00 a.m.•6 views

CVE-2015-8834: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an...

6.1CVSS6.9AI score0.01784EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2016/03/25 12:00 a.m.•33 views

WordPress <= 4.2.1 - XSS

This vulnerability in wp-includes/wp-db.php allows an attacker to inject arbitrary web script or HTML via a long comment which is improperly stored because there are some limitations on the MySQL TEXT data type. Solution Update WordPress...

6.1CVSS1.8AI score0.01784EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2015/08/03 2:00 p.m.•5 views

CVE-2015-3440

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type...

6.3CVSS0.16889EPSS
SaveExploits2References16
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/03 12:00 a.m.•8 views

CVE-2015-3440: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type...

4.3CVSS6.9AI score0.16889EPSS
SaveExploits2References2
Rows per page
Query Builder