BIT-wordpress-2024-31111

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/wordpress/BIT-wordpress-2024-31111.json
JSON Data
https://api.test.osv.dev/v1/vulns/BIT-wordpress-2024-31111
Aliases
Published
2024-06-27T07:43:50.052Z
Modified
2024-08-10T07:56:17.932Z
Summary
[none]
Details

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9.

Database specific
{
    "cpes": [
        "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}
References

Affected packages

Bitnami / wordpress

Package

Name
wordpress
Purl
pkg:bitnami/wordpress

Severity

  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
6.5.0
Fixed
6.5.5
Introduced
6.4.0
Fixed
6.4.5
Introduced
6.3.0
Fixed
6.3.5
Introduced
6.2.0
Fixed
6.2.6
Introduced
6.1.0
Fixed
6.1.7
Introduced
6.0.0
Fixed
6.0.9
Introduced
5.9.0
Fixed
5.9.10