Description
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.
Remediation
References
Related Vulnerabilities
Envoy Proxy Use After Free Vulnerability (CVE-2023-35942)
phpMyAdmin Improper Input Validation Vulnerability (CVE-2016-6623)
WordPress Other Vulnerability (CVE-2006-1263)
Drupal Core 7.x Remote Code Execution (7.0 - 7.57)
WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)