Description

Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field.

Remediation

References

CVE-2012-6633

Related Vulnerabilities

MySQL CVE-2016-0659 Vulnerability (CVE-2016-0659)

WordPress Plugin Meta Slider and Carousel with Lightbox Cross-Site Request Forgery (1.6.2)

WordPress Plugin Meteor Slides Cross-Site Scripting (1.5.6)

MySQL CVE-2015-4826 Vulnerability (CVE-2015-4826)

Drupal Improper Access Control Vulnerability (CVE-2016-3162)

Severity

Medium

Classification

CVE-2012-6633 CWE-707

Tags

Missing Update Known Vulnerabilities