Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Automattic WordPress allows Stored XSS.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6, from 6.0 through 6.0.8, from 5.9 through 5.9.9.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| Automattic | WordPress | 6.5 – ≤ 6.5.4, 6.4 – ≤ 6.4.4, 6.3 – ≤ 6.3.4, 6.2 – ≤ 6.2.5, 6.1 – ≤ 6.1.6, 6.0 – ≤ 6.0.8, 5.9 – ≤ 5.9.9 |
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.
