Description

In WordPress before 4.7.3 (wp-includes/embed.php), there is authenticated Cross-Site Scripting (XSS) in YouTube URL Embeds.

Remediation

References

CVE-2017-6817

Related Vulnerabilities

WordPress Plugin wpDataTables-WordPress Data Table, Dynamic Tables & Table Charts Multiple Vulnerabilities (1.2.2)

Oracle JRE CVE-2022-21294 Vulnerability (CVE-2022-21294)

WordPress Plugin WP SEO Tags Cross-Site Scripting (2.2.7)

WordPress Plugin Shariff Wrapper Local File Inclusion (4.6.13)

WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)

Severity

Medium

Classification

CVE-2017-6817 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities