CVE

Id
92654  
CVE No.
CVE-2016-5834  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the wp_get_attachment_link function in wp-includes/post-template.php in WordPress before 4.5.3 allows remote attackers to inject arbitrary web script or HTML via a crafted attachment name, a different vulnerability than CVE-2016-5833.  
Phase
Assigned (20160623)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
791419 92654 CVE-2016-5834 MISC:https://wpvulndb.com/vulnerabilities/8518  View
791420 92654 CVE-2016-5834 CONFIRM:https://codex.wordpress.org/Version_4.5.3  View
791421 92654 CVE-2016-5834 CONFIRM:https://github.com/WordPress/WordPress/commit/4372cdf45d0f49c74bbd4d60db7281de83e32648  View
791422 92654 CVE-2016-5834 CONFIRM:https://wordpress.org/news/2016/06/wordpress-4-5-3/  View
791423 92654 CVE-2016-5834 DEBIAN:DSA-3639  View
791424 92654 CVE-2016-5834 URL:http://www.debian.org/security/2016/dsa-3639  View
791425 92654 CVE-2016-5834 BID:91368  View
791426 92654 CVE-2016-5834 URL:http://www.securityfocus.com/bid/91368  View
791427 92654 CVE-2016-5834 SECTRACK:1036163  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3402 JVNDB-2016-004175 SAP TREX の不特定のインターフェースにおける SIDadm 権限で任意の OS コマンドを実行される脆弱性 SAP TREX の不特定のインターフェースには、SIDadm 権限で任意の OS コマンドを実行される脆弱性が存在します。 CVE-2016-6147 92654 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004175.html  View