WordPress Vulnerabilities
WordPress <= 5.0 - File Upload to XSS on Apache Web Servers
Description
According to WordPress: "Tim Coen and Slavco discovered that authors on Apache-hosted sites could upload specifically crafted files that bypass MIME verification, leading to a cross-site scripting vulnerability."
References
Classification
Miscellaneous
Original Researcher
Tim Coen and Slavco
Submitter
Ryan Dewhurst
Submitter twitter
Verified
No
Timeline
Publicly Published
2018-12-13 (about 3 years ago)
Added
2018-12-13 (about 3 years ago)
Last Updated
2020-09-22 (about 2 years ago)