Description
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type.
Remediation
References
Related Vulnerabilities
Opencart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3763)
WordPress Plugin Cool Timeline (Horizontal & Vertical Timeline) Security Bypass (2.3.3)
Oracle JRE CVE-2024-20952 Vulnerability (CVE-2024-20952)
WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)
WordPress Plugin Windows Desktop and iPhone Photo Uploader Arbitrary File Upload (1.8)