Description In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API. Remediation References CVE-2017-9062 Related Vulnerabilities qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26166) WordPress Plugin NextScripts:Social Networks Auto-Poster Cross-Site Scripting (4.3.23) MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-40601) WordPress Plugin Integration for HubSpot and WooCommerce Cross-Site Scripting (1.0.4) Apache HTTP Server Other Vulnerability (CVE-2006-5752) Severity High Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2017-9062