CVE-2017-5488 in WordPress
Summary
Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
01/14/2017
Disclosure
01/14/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95348 | WordPress update-core.php cross site scripting | 79 | Proof-of-Concept | Official fix | CVE-2017-5488 |