Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

Remediation

References

CVE-2013-0236

Related Vulnerabilities

Dolphin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3728)

WordPress Plugin Zendesk Chat Cross-Site Request Forgery (1.4.5)

WordPress Plugin tcS3 Cross-Site Scripting (2.1.1)

Liferay Portal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-5190)

Ruby Improper Input Validation Vulnerability (CVE-2015-1855)

Severity

Medium

Classification

CVE-2013-0236 CWE-707

Tags

Missing Update Known Vulnerabilities