[arch-security] [ASA-201601-2] wordpress: cross-side scripting
anthraxx at archlinux.org
Sat Jan 9 15:36:32 UTC 2016
Arch Linux Security Advisory ASA-201601-2
Date : 2016-01-09
CVE-ID : CVE-2016-1564
Package : wordpress
Type : cross-side scripting
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE
The package wordpress before version 4.4.1-1 is vulnerable to cross-side
Upgrade to 4.4.1-1.
# pacman -Syu "wordpress>=4.4.1-1"
The problem has been fixed upstream in version 4.4.1.
A cross-site scripting vulnerability has been discovered that could
allow a site to be compromised.
leading to cross-side scripting that could result in a site to be
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the arch-security