Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

Remediation

References

CVE-2013-0236

Related Vulnerabilities

WordPress Plugin Asset CleanUp:Page Speed Booster Cross-Site Scripting (1.3.6.7)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6335)

WordPress Plugin Coming Soon & Maintenance Mode Page Unspecified Vulnerability (1.40)

Django Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4534)

WordPress CVE-2020-28033 Vulnerability (CVE-2020-28033)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-0236