Security Advisory

CVE-2012-2403

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-04-21 23:00:00
Last updated 2024-08-06 19:34:25
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.