CVEvulnerability
CVE-2015-5714
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-05-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web script or HTML by leveraging the mishandling of unclosed HTML elements during processing of shortcode tags.
Affected configurations
• wordpress wordpress (<= 4.3.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://www.debian.org/security/2015/dsa-3375 www.debian.org
- http://www.debian.org/security/2015/dsa-3383 www.debian.org
- http://www.securityfocus.com/bid/76745 www.securityfocus.com
- http://www.securitytracker.com/id/1033979 www.securitytracker.com
- https://codex.wordpress.org/Version_4.3.1 Patch
- https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8 github.com
- https://security-tracker.debian.org/tracker/CVE-2015-5714 security-tracker.debian.org
- https://wordpress.org/news/2015/09/wordpress-4-3-1/ Patch, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/8186 wpvulndb.com
- http://www.debian.org/security/2015/dsa-3375 www.debian.org
- http://www.debian.org/security/2015/dsa-3383 www.debian.org
- http://www.securityfocus.com/bid/76745 www.securityfocus.com
- http://www.securitytracker.com/id/1033979 www.securitytracker.com
- https://codex.wordpress.org/Version_4.3.1 Patch
- https://github.com/WordPress/WordPress/commit/f72b21af23da6b6d54208e5c1d65ececdaa109c8 github.com
- https://security-tracker.debian.org/tracker/CVE-2015-5714 security-tracker.debian.org
- https://wordpress.org/news/2015/09/wordpress-4-3-1/ Patch, Vendor Advisory
- https://wpvulndb.com/vulnerabilities/8186 wpvulndb.com