Описание
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.
Ссылки
- Patch
- Release Notes
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
EPSS
4.9 Medium
CVSS3
5.4 Medium
CVSS3
Дефекты
Связанные уязвимости
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticate ...
WordPress Core, in versions up to 6.0.2, is vulnerable to Authenticated Stored Cross-Site Scripting that can be exploited by users with access to the WordPress post and page editor, typically consisting of Authors, Contributors, and Editors making it possible to inject arbitrary web scripts into posts and pages that execute if the the_meta(); function is called on that page.
EPSS
4.9 Medium
CVSS3
5.4 Medium
CVSS3