Description

The get_allowed_mime_types function in wp-includes/functions.php in WordPress before 3.6.1 does not require the unfiltered_html capability for uploads of .htm and .html files, which might make it easier for remote authenticated users to conduct cross-site scripting (XSS) attacks via a crafted file.

Remediation

References

CVE-2013-5738

Related Vulnerabilities

OpenSSL Numeric Errors Vulnerability (CVE-2008-0891)

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-10682)

Magento Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') Vulnerability (CVE-2019-8126)

WordPress Plugin Advanced Advertising System PHP Object Injection (1.3.1)

Joomla Other Vulnerability (CVE-2005-4650)

Severity

Medium

Classification

CVE-2013-5738 CWE-20

Tags

Missing Update Known Vulnerabilities