Description

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

Remediation

References

CVE-2012-2403

Related Vulnerabilities

WordPress Plugin WordPress Slider Block Gutenslider Cross-Site Scripting (5.1.5)

MySQL CVE-2016-5507 Vulnerability (CVE-2016-5507)

Django Numeric Errors Vulnerability (CVE-2013-0306)

Beego Framework CVE-2021-30080 Vulnerability (CVE-2021-30080)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2009-0023)

Severity

Medium

Classification

CVE-2012-2403 CWE-707

Tags

Missing Update Known Vulnerabilities