Description
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2021-39275)
Jboss EAP Improper Input Validation Vulnerability (CVE-2019-12400)
WordPress Plugin WordPress Ad Widget Local File Inclusion (2.11.0)
WordPress Plugin FavIcon Switcher Cross-Site Request Forgery (1.2.11)
WordPress Plugin TAKETIN To WP Membership PHP Object Injection (1.2.7)