NVD

Id
26729  
Name
CVE-2015-5622  
Description
Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML by leveraging the Author or Contributor role to place a crafted shortcode inside an HTML element, related to wp-includes/kses.php and wp-includes/shortcodes.php.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-08-03  
Modified Date
2016-12-07  
Seq
2015-5622  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
141507 26729 CVE-2015-5622 http://codex.wordpress.org/Version_4.2.3  View
141508 26729 CVE-2015-5622 [oss-security] 20150723 Re: CVE request: WordPress 4.2.2 and earlier cross-site scripting vulnerability  View
141509 26729 CVE-2015-5622 DSA-3328  View
141510 26729 CVE-2015-5622 DSA-3332  View
141511 26729 CVE-2015-5622 76011  View
141512 26729 CVE-2015-5622 https://core.trac.wordpress.org/changeset/33359  View
141513 26729 CVE-2015-5622 https://klikki.fi/adv/wordpress3.html  View
141514 26729 CVE-2015-5622 https://wordpress.org/news/2015/07/wordpress-4-2-3/  View
141515 26729 CVE-2015-5622 https://wpvulndb.com/vulnerabilities/8111  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8651 JVNDB-2015-003971 WordPress におけるクロスサイトスクリプティングの脆弱性 WordPress には、wp-includes/kses.php および wp-includes/shortcodes.php に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-5622 82847 CVE-2015-5622 26729 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003971.html 2015-07-23 2015-08-04 View