Description (CNA)
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://wpvulndb.com/vulnerabilities/8186
- https://codex.wordpress.org/Version_4.3.1
- http://www.debian.org/security/2015/dsa-3375
- https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8
- https://wordpress.org/news/2015/09/wordpress-4-3-1/
- http://www.securitytracker.com/id/1033979
- http://www.debian.org/security/2015/dsa-3383
- https://security-tracker.debian.org/tracker/CVE-2015-5714
- http://www.securityfocus.com/bid/76745
ADP enrichment
No English description supplied.
- https://wpvulndb.com/vulnerabilities/8186
- https://codex.wordpress.org/Version_4.3.1
- http://www.debian.org/security/2015/dsa-3375
- https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8
- https://wordpress.org/news/2015/09/wordpress-4-3-1/
- http://www.securitytracker.com/id/1033979
- http://www.debian.org/security/2015/dsa-3383
- https://security-tracker.debian.org/tracker/CVE-2015-5714
- http://www.securityfocus.com/bid/76745