Lucene search
N/APATCHSTACK:F4DF937630A6D9E65DA69256CE30E79BHistoryJun 23, 2016 - 12:00 a.m.
WordPress <= 4.5.2 - XSS #1
2016-06-2300:00:00
N/A
patchstack.com
7
0.004 Low
EPSS
Percentile
71.9%
WordPress version 4.5.2 is prone to a cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php. It allows an attacker to inject arbitrary web script or HTML via a crafted attachment name.
Related: http://db.threatpress.com/sysadmin/vulnerabilities/835/
Solution
Update WordPress.
Related
cve
cve
CVE-2016-5833
2016-06-29 14:10:04
CVE-2016-5834
2016-06-29 14:10:05
nvd
nvd
CVE-2016-5834
2016-06-29 14:10:05
CVE-2016-5833
2016-06-29 14:10:04
debiancve
debiancve
CVE-2016-5833
2016-06-29 14:10:04
CVE-2016-5834
2016-06-29 14:10:05
cvelist
cvelist
CVE-2016-5833
2016-06-29 14:00:00
CVE-2016-5834
2016-06-29 14:00:00
ubuntucve
ubuntucve
CVE-2016-5833
2016-06-29 00:00:00
CVE-2016-5834
2016-06-29 00:00:00
wpvulndb
wpvulndb
WordPress 4.2-4.5.2 - Authenticated Attachment Name Stored XSS
2016-06-21 00:00:00
prion
prion
Cross site scripting
2016-06-29 14:10:00
Cross site scripting
2016-06-29 14:10:00
nessus
nessus
Debian DLA-568-1 : wordpress security update (httpoxy)
2016-08-01 00:00:00
Debian DSA-3639-1 : wordpress - security update
2016-08-04 00:00:00
debian
debian
[SECURITY] [DLA 568-1] wordpress security update
2016-07-29 16:23:23
[SECURITY] [DSA 3639-1] wordpress security update
2016-08-03 15:36:22
[SECURITY] [DSA 3639-1] wordpress security update
2016-08-03 15:36:22
fedora
fedora
[SECURITY] Fedora 22 Update: wordpress-4.5.3-1.fc22
2016-06-30 14:53:10
[SECURITY] Fedora 23 Update: wordpress-4.5.3-1.fc23
2016-06-30 19:54:36
[SECURITY] Fedora 24 Update: wordpress-4.5.3-1.fc24
2016-06-30 21:32:26
openvas
openvas
Debian Security Advisory DSA 3639-1 (wordpress - security update)
2016-08-04 00:00:00
Debian: Security Advisory (DSA-3639-1)
2016-08-04 00:00:00
Debian: Security Advisory (DLA-568-1)
2023-03-08 00:00:00
osv
osv
wordpress - security update
2016-07-29 00:00:00
freebsd
freebsd
wordpress -- multiple vulnerabilities
2016-06-18 00:00:00