Debian/wordpress: medium 6.1

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).

Action: Upgrade wordpress to 4.9.2+dfsg-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2018-5776
• https://security-tracker.debian.org/tracker/CVE-2018-5776

published 2018-01-18T22:29:00.280Z · modified 2026-10-23T18:03:07.357537340Z · JSON