Description

The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered_html capability for uploads of .htm and .html files, which might make it easier for remote authenticated users to conduct cross-site scripting (XSS) attacks via a crafted file.

Remediation

References

CVE-2013-5738

Related Vulnerabilities

WordPress Plugin RapidLoad Power-Up for Autoptimize Multiple Vulnerabilities (1.7.1)

WordPress Plugin Feedify Remote Code Execution (2.0.0)

WordPress Plugin MM Forms Community 'doajaxfileupload.php' Arbitrary File Upload (2.2.6)

XOOPS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2004-2756)

Magento XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2021-21019)

Severity

Medium

Classification

CVE-2013-5738 CWE-20

Tags

Missing Update Known Vulnerabilities