https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:10:45 +0000 https://vulnerability.circl.lu/vuln/cnvd-2016-03647 cnvd-2016-03647 https://vulnerability.circl.lu/vuln/cnvd-2016-03647 https://vulnerability.circl.lu/vuln/fkie_cve-2015-8834 <p>Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.</p> <p>Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2015-8834 https://vulnerability.circl.lu/vuln/ghsa-c2wg-9wh8-qj37 <p>Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.</p> <p>Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3440.</p> https://vulnerability.circl.lu/vuln/ghsa-c2wg-9wh8-qj37 https://vulnerability.circl.lu/vuln/gsd-2015-8834 gsd-2015-8834 https://vulnerability.circl.lu/vuln/gsd-2015-8834