Description
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.
Remediation
References
Related Vulnerabilities
MySQL Improper Access Control Vulnerability (CVE-2016-8288)
WordPress Plugin CM Ad Changer Multiple Cross-Site Scripting Vulnerabilities (1.7.2)
ZenCart Improper Authentication Vulnerability (CVE-2009-2255)
WordPress Plugin Contact Form DB Multiple Cross-Site Scripting Vulnerabilities (2.8.15)
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-26265)