Описание
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
Релиз | Статус | Примечание |
---|---|---|
artful | ignored | end of life |
bionic | not-affected | 4.3.1+dfsg-1 |
cosmic | not-affected | 4.3.1+dfsg-1 |
devel | not-affected | 4.3.1+dfsg-1 |
disco | not-affected | 4.3.1+dfsg-1 |
esm-apps/bionic | not-affected | 4.3.1+dfsg-1 |
esm-apps/xenial | not-affected | 4.3.1+dfsg-1 |
esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
precise | ignored | end of life |
precise/esm | DNE | precise was needs-triage |
Показывать по
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3
Связанные уязвимости
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
Cross-site scripting (XSS) vulnerability in the user list table in Wor ...
Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted e-mail address, a different vulnerability than CVE-2015-5714.
EPSS
3.5 Low
CVSS2
5.4 Medium
CVSS3