Description
Cross-site scripting (XSS) vulnerability in the column_title function in wp-admin/includes/class-wp-media-list-table.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5834.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2015-4857 Vulnerability (CVE-2015-4857)
Oracle HTTP Server Other Vulnerability (CVE-1999-1125)
WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12)
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2016-5424)
phpMyAdmin Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-9866)