Description
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833.
Remediation
References
Related Vulnerabilities
WordPress Plugin Slideshow Information Disclosure (2.2.21)
MySQL CVE-2018-3212 Vulnerability (CVE-2018-3212)
OpenSSL Other Vulnerability (CVE-2015-0288)
WordPress Plugin WP DSGVO Tools (GDPR) Cross-Site Scripting (3.1.23)
WordPress Plugin JetWidgets for Elementor and WooCommerce Local File Inclusion (1.1.7)