Lucene search
Veracode Vulnerability DatabaseVERACODE:21501HistorySep 12, 2019 - 11:33 a.m.
Cross-site Scripting (XSS)
2019-09-1211:33:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.006 Low
EPSS
Percentile
78.9%
wordpress is vulnerable to cross-site scripting. The attack is due to lack of validation of parameters in the post previews by authenticated users which allows an attacker to inject and execute arbitrary scripts.
References
packetstormsecurity.com/files/160745/WordPress-Core-5.2.2-Cross-Site-Scripting.html
lists.debian.org/debian-lts-announce/2019/10/msg00023.html
seclists.org/bugtraq/2020/Jan/8
wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/
wpvulndb.com/vulnerabilities/9862
www.debian.org/security/2020/dsa-4599
www.debian.org/security/2020/dsa-4677
Related
checkpoint_advisories
checkpoint_advisories
WordPress Core Cross Site Scripting (CVE-2019-16223)
2021-02-18 00:00:00
debiancve
debiancve
CVE-2019-16223
2019-09-11 14:15:12
cve
cve
CVE-2019-16223
2019-09-11 14:15:12
wpvulndb
wpvulndb
WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews
2019-09-05 00:00:00
cvelist
cvelist
CVE-2019-16223
2019-09-11 13:07:06
osv
osv
CVE-2019-16223
2019-09-11 14:15:00
wordpress - security update
2019-10-16 00:00:00
wordpress - security update
2020-01-08 00:00:00
ubuntucve
ubuntucve
CVE-2019-16223
2019-09-11 00:00:00
packetstorm
packetstorm
WordPress Core 5.2.2 Cross Site Scripting
2021-01-02 00:00:00
prion
prion
Cross site scripting
2019-09-11 14:15:00
nvd
nvd
CVE-2019-16223
2019-09-11 14:15:12
exploitdb
exploitdb
Wordpress Core 5.2.2 - 'post previews' XSS
2021-01-04 00:00:00
debian
debian
[SECURITY] [DLA 1960-1] wordpress security update
2019-10-17 20:21:46
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
nessus
nessus
Debian DLA-1960-1 : wordpress security update
2019-10-18 00:00:00
Debian DSA-4599-1 : wordpress - security update
2020-01-09 00:00:00
openvas
openvas
WordPress Multiple Vulnerabilities (Sep 2019) - Linux
2019-09-09 00:00:00
WordPress Multiple Vulnerabilities (Sep 2019) - Windows
2019-09-09 00:00:00
Debian: Security Advisory (DLA-1960-1)
2019-10-18 00:00:00