CVE-2012-2403 in WordPress
Resumen (Inglés)
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Reservar
2012-04-21
Divulgación
2012-04-21
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 60628 | WordPress secuencias de comandos en sitios cruzados | 79 | No está definido | Arreglo oficial | CVE-2012-2403 |