Ubuntu.comUB:CVE-2015-5733CVE-2015-5733
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
80.3%
Cross-site scripting (XSS) vulnerability in the
refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in
WordPress before 4.2.4 allows remote attackers to inject arbitrary web
script or HTML via an accessibility-helper title.
Bugs
References
www.openwall.com/lists/oss-security/2015/08/04
www.openwall.com/lists/oss-security/2015/08/04/7
core.trac.wordpress.org/changeset/33540
core.trac.wordpress.org/changeset/33541
launchpad.net/bugs/cve/CVE-2015-5733
nvd.nist.gov/vuln/detail/CVE-2015-5733
security-tracker.debian.org/tracker/CVE-2015-5733
www.cve.org/CVERecord?id=CVE-2015-5733
Related
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
80.3%