Description
Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5834.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ad-Manager Open Redirect (1.1.2)
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-6626)
WordPress Plugin Simple Membership Cross-Site Scripting (3.2.8)
WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Request Forgery (8.9)
WordPress Plugin Super Interactive Maps for WordPress Arbitrary File Upload (1.9)