CVE-2016-7168

CVE-2016-7168

Cross-site scripting (XSS) vulnerability in the media_handle_upload function in wp-admin/includes/media.php in WordPress before 4.6.1 might allow remote attackers to inject arbitrary web script or HTML by tricking an administrator into uploading an image file that has a crafted filename.

Source: CVE-2016-7168

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다