tocsin

Debian/wordpress: unknown

Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web script

Action: Upgrade wordpress to 3.5.1+dfsg-1 or later.

Affected

introducedfixedlast affected
03.5.1+dfsg-1-

Fixed versions

3.5.1+dfsg-1

Sources

published · modified · JSON