Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-5732
HistoryNov 09, 2015 - 11:59 a.m.

Cross site scripting

2015-11-0911:59:00
PRIOn knowledge base
www.prio-n.com
5

5.9 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%

Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.

CPENameOperatorVersion
wordpressle4.2.3

5.9 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.1%