Description
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).
Remediation
References
Related Vulnerabilities
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)
WordPress Plugin Awesome Filterable Portfolio Multiple SQL Injection Vulnerabilities (1.8.6)
WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.6)
Magento Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-3458)
WordPress Plugin Blog social sharing component Cross-Site Scripting (1.4.4)