Unscored CVE-2016-4812 EUVD-2016-5794GHSA-8265-5pcw-vhx2

Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inje…

Published Jun 4, 2016 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the Markdown on Save Improved plugin before 2.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

JVN#26026353 third-party-advisory
JVNDB-2016-000071 third-party-advisory
https://srd.wordpress.org/plugins/markdown-on-save-improved/changelog/