Description
Cross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in wp-includes/default-widgets.php in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via a widget title.
Remediation
References
Related Vulnerabilities
Artifactory Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-46687)
WordPress Plugin Fusion:Extension-Gallery Multiple Unspecified Vulnerabilities (1.0.4)
WordPress Plugin Magee Shortcodes Cross-Site Scripting (1.6.3)
WordPress Plugin Mingle Forum SQL Injection and Security Bypass Vulnerabilities (1.0.26)
Squid Improper Input Validation Vulnerability (CVE-2013-4123)