Description

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

Remediation

References

CVE-2013-0236

Related Vulnerabilities

WordPress Plugin Flexible Captcha Multiple Vulnerabilities (3.3)

MySQL CVE-2015-0409 Vulnerability (CVE-2015-0409)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33194)

Frontaccounting Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2007-5148)

MediaWiki Credentials Management Errors Vulnerability (CVE-2015-8009)

Severity

Medium

Classification

CVE-2013-0236 CWE-707

Tags

Missing Update Known Vulnerabilities