https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 10:50:45 +0000 https://vulnerability.circl.lu/vuln/cnvd-2015-05150 cnvd-2015-05150 https://vulnerability.circl.lu/vuln/cnvd-2015-05150 https://vulnerability.circl.lu/vuln/fkie_cve-2015-3438 <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-3438 https://vulnerability.circl.lu/vuln/ghsa-cv8p-7fxf-fmqr <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> https://vulnerability.circl.lu/vuln/ghsa-cv8p-7fxf-fmqr https://vulnerability.circl.lu/vuln/gsd-2015-3438 gsd-2015-3438 https://vulnerability.circl.lu/vuln/gsd-2015-3438 https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3438 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wordpress</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: wordpress</p> <p>Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attackers to inject arbitrary web script or HTML via a (1) four-byte UTF-8 character or (2) invalid character that reaches the database layer, as demonstrated by a crafted character in a comment.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3438