CVE-2012-2403
Publication date 21 April 2012
Last updated 24 July 2024
Ubuntu priority
Description
wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| wordpress | ||
| 16.04 LTS xenial |
Not affected
|
|
| 14.04 LTS trusty | Not in release | |