Description

Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.

Remediation

References

CVE-2017-14724

Related Vulnerabilities

WordPress Plugin Search & Filter Cross-Site Scripting (1.2.15)

Drupal Other Vulnerability (CVE-2008-3661)

Oracle JRE CVE-2013-2383 Vulnerability (CVE-2013-2383)

WordPress Plugin Onclick show popup Cross-Site Scripting (6.5)

Jenkins Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2021-21615)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2017-14724