WordPress <= 4.1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
| Description |
WordPress versions 4.1.1 and earlier are affected by a critical cross-site scripting vulnerability, which could enable anonymous users to compromise a site. |
Affects WordPresses
|
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
fixed in version 4.1.2
|
References
| CVE | 2015-3438 |
| URL | https://wordpress.org/news/2015/04/wordpress-4-1-2/ |
| URL | https://cedricvb.be/post/wordpress-stored-xss-vulnerability-4-1-2/ |
Classification
| Type | XSS |
| OWASP Top 10 | A7: Cross-Site Scripting (XSS) |
| CWE | CWE-79 |
Miscellaneous
| Submitter | ethicalhack3r |
| Submitter Website | https://dewhurstsecurity.com/ |
| Submitter Twitter | ethicalhack3r |
| Views | 9100 |
| Verified | No |
| WPVDB ID | 7929 |
Timeline
| Publicly Published | 2015-04-21 (about 5 years ago) |
| Added | 2015-04-21 (about 5 years ago) |
| Last Updated | 2019-10-22 (7 months ago) |
Our Other Services
| Online WordPress Vulnerability Scanner | WPScan WordPress Security Plugin |
