Description

Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field.

Remediation

References

CVE-2012-6633

Related Vulnerabilities

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5832)

Oracle Database Server CVE-2015-4873 Vulnerability (CVE-2015-4873)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.18)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-1318)

Ruby on Rails Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-8162)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-6633