CVE-2012-2403 in WordPress
Summary
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Reservation
04/21/2012
Disclosure
04/21/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 60628 | WordPress cross site scripting | 79 | Not defined | Official fix | CVE-2012-2403 |