medium6.1
CVE-2022-43497
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script.
Impact
Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wordpress | Wordpress | before 3.7.40 from 3.8 before 3.8.40 from 3.9 before 3.9.39 from 4.0 before 4.0.37 from 4.1 before 4.1.37 from 4.2 before 4.2.34 |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/jp/JVN09409909/index.html
- https://wordpress.org/download/
- https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/
- https://jvn.jp/en/jp/JVN09409909/index.html
- https://wordpress.org/download/
- https://wordpress.org/news/2022/10/wordpress-6-0-3-security-release/