CVE-2012-2403: XSS
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2403?
CVE-2012-2403 is considered to have a high severity due to its potential to enable cross-site scripting (XSS) attacks.
How do I fix CVE-2012-2403?
To fix CVE-2012-2403, upgrade your WordPress installation to version 3.3.2 or higher.
What versions of WordPress are affected by CVE-2012-2403?
CVE-2012-2403 affects WordPress versions prior to 3.3.2, including versions 3.3.1 and earlier.
What type of vulnerability is CVE-2012-2403?
CVE-2012-2403 is a cross-site scripting (XSS) vulnerability that allows attackers to execute arbitrary scripts.
How does CVE-2012-2403 exploit WordPress?
CVE-2012-2403 exploits WordPress by allowing the insertion of clickable links within HTML attributes, leading to XSS attacks.