Описание
Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
| Релиз | Статус | Примечание | 
|---|---|---|
| artful | not-affected  | 4.0.1+dfsg-1 | 
| bionic | not-affected  | 4.0.1+dfsg-1 | 
| cosmic | not-affected  | 4.0.1+dfsg-1 | 
| devel | not-affected  | 4.0.1+dfsg-1 | 
| disco | not-affected  | 4.0.1+dfsg-1 | 
| esm-apps/bionic | not-affected  | 4.0.1+dfsg-1 | 
| esm-apps/xenial | not-affected  | 4.0.1+dfsg-1 | 
| esm-infra-legacy/trusty | DNE  | trusty/esm was DNE [trusty was needed] | 
| lucid | ignored  | end of life | 
| precise | ignored  | end of life | 
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Cross-site scripting (XSS) vulnerability in the media-playlists featur ...
Cross-site scripting (XSS) vulnerability in the media-playlists feature in WordPress before 3.9.x before 3.9.3 and 4.x before 4.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
EPSS
4.3 Medium
CVSS2