Description

Cross-site scripting (XSS) vulnerability in wp-includes/default-filters.php in WordPress before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via an editable slug field.

Remediation

References

CVE-2012-6633

Related Vulnerabilities

WordPress Plugin WordLift-AI powered SEO-Schema Cross-Site Scripting (3.37.1)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-8057)

WordPress Plugin PublishPress Future: Automatically Unpublish WordPress Posts Security Bypass (2.5.1)

WordPress Plugin Image Rotator Cross-Site Scripting (1.0)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2018-13402)

Severity

Medium

Classification

CVE-2012-6633 CWE-707

Tags

Missing Update Known Vulnerabilities