Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:21504
HistorySep 12, 2019 - 10:28 p.m.

Cross-site Scripting (XSS)

2019-09-1222:28:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

EPSS

0.032

Percentile

91.4%

JSON

wordpress is vulnerable to cross-site scripting (XSS). The attack is due to not handling of the existing rel attribute in wp_rel_nofollow_calback(), allowing an attacker to inject arbitrary script during shortcode previews.

Related

ubuntucve 1
cvelist 1
prion 1
redhatcve 1
osv 3
threatpost 1
nvd 1
cve 1
wpvulndb 1
debiancve 1
nessus 4
debian 5
openvas 4
hackerone 1
ubuntucve
ubuntucve
CVE-2019-16219
2019-09-11 00:00:00
cvelist
cvelist
CVE-2019-16219
2019-09-11 13:07:31
prion
prion
Design/Logic Flaw
2019-09-11 14:15:00
redhatcve
redhatcve
CVE-2019-16219
2022-05-20 22:39:23
osv
osv
CVE-2019-16219
2019-09-11 14:15:11
wordpress - security update
2019-10-16 00:00:00
wordpress - security update
2020-01-08 00:00:00
threatpost
threatpost
WordPress XSS Bug Allows Drive-By Code Execution
2019-09-13 20:52:53
nvd
nvd
CVE-2019-16219
2019-09-11 14:15:11
cve
cve
CVE-2019-16219
2019-09-11 14:15:11
wpvulndb
wpvulndb
WordPress 5.0-5.2.2 - Authenticated Stored XSS in Shortcode Previews
2019-09-05 00:00:00
debiancve
debiancve
CVE-2019-16219
2019-09-11 14:15:11
nessus
nessus
Debian DLA-1960-1 : wordpress security update
2019-10-18 00:00:00
WordPress <= 3.6.1 / 3.7.x < 3.7.30 / 3.8.x < 3.8.30 / 3.9.x < 3.9.28 / 4.0.x < 4.0.27 / 4.1.x < 4.1.27 / 4.2.x < 4.2.24 / 4.3.x < 4.3.20 / 4.4.x < 4.4.19 / 4.5.x < 4.5.18 / 4.6.x < 4.6.15 / 4.7.x < 4.7.14 / 4.8.x < 4.8.10 / 4.9.x < 4.9.11 / 5.0.x < 5.0.6 / 5.1.x < 5.1.2 / 5.2.x < 5.2.3 Multiple Vulnerabilities
2019-09-09 00:00:00
Debian DSA-4599-1 : wordpress - security update
2020-01-09 00:00:00
debian
debian
[SECURITY] [DLA 1960-1] wordpress security update
2019-10-17 20:21:46
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
[SECURITY] [DSA 4599-1] wordpress security update
2020-01-08 05:47:13
openvas
openvas
WordPress Multiple Vulnerabilities (Sep 2019) - Windows
2019-09-09 00:00:00
WordPress Multiple Vulnerabilities (Sep 2019) - Linux
2019-09-09 00:00:00
Debian: Security Advisory (DLA-1960-1)
2019-10-18 00:00:00
hackerone
hackerone
Nord Security: Version problem in wordpress leads to the many vulnearability
2019-12-05 10:21:54

EPSS

0.032

Percentile

91.4%

JSON
Related for VERACODE:21504
ubuntucve1cvelist1prion1redhatcve1osv3threatpost1nvd1cve1wpvulndb1debiancve1nessus4debian5openvas4hackerone1