Published: 11/09/2019 Updated: 07/10/2022

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

WordPress prior to 5.2.3 allows XSS in post previews by authenticated users.

Vulnerable Product	Search on Vulmon	Subscribe to Product
wordpress wordpress
debian debian linux 8.0
debian debian linux 9.0
debian debian linux 10.0

Several vulnerabilities were discovered in Wordpress, a web blogging tool They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, create open redirects, poison cache, and bypass authorization access and input sanitation For the stable distribution (buster), these problems have bee ...

Several vulnerabilities were discovered in Wordpress, a web blogging tool They allowed remote attackers to perform various Cross-Side Scripting (XSS) and Cross-Site Request Forgery (CSRF) attacks, create files on the server, disclose private information, create open redirects, poison cache, and bypass authorization access and input sanitation For ...

WordPress core versions 522 and below suffer from a cross site scripting vulnerability ...

Kali Vs WordPress Pentesting write-up/report: First exploit found: XSS (Cross Site Scripting) Summary for exploit 1: The types / classes of vulnerabilities involved and any related CVE identifiers The vulnerability type is XSS The CVE Identifier is: CVE-2020-11030 Identify affected versions and patches The affected versions and patches are for versions 422 or older vers

CWE-79 https://wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/https://wpvulndb.com/vulnerabilities/9862 https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html https://www.debian.org/security/2020/dsa-4599 https://seclists.org/bugtraq/2020/Jan/8 https://www.debian.org/security/2020/dsa-4677 http://packetstormsecurity.com/files/160745/WordPress-Core-5.2.2-Cross-Site-Scripting.html https://nvd.nist.gov https://github.com/MeerAbdullah/Kali-Vs-WordPress https://www.debian.org/security/2020/dsa-4599

CVE-2019-16223

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect