CVE-2013-0236

CVE-2013-0236

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the content of a post.

EPSS 2.5% · Fix available

Published

2013-07-08T20:00:00.000Z

Updated

2024-09-16T22:55:24.388Z

Stack: system

Check your server →