WordPress Vulnerabilities

WordPress 3.5 - Shortcodes / Post Content Multiple Unspecified XSS

Affects WordPress

3.5
Fixed in WordPress 3.5.1

References

CVE
CVE-2013-0236
URL
http://securitytracker.com/id?1028045

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
dd960cfa-1c04-47fd-9467-743475fcd536

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-10-25 (about 5 years ago)

Other

Published
Title
Published
2025-01-16
Title
WCS QR Code Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-04-16
Title
Attendance Manager <= 0.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2017-08-21
Title
Liveforms < 3.4.0 - XSS
Published
2024-12-11
Title
Ninja Forms < 3.8.20 - Unauthenticated Stored XSS via Form Calculations
Published
2025-01-30
Title
WE – Testimonial Slider <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting