CVE-2012-2403

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to…

published April 21, 2012

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02762 · 86.1th percentile
Published
2012-04-21T23:00Z
EPSS history
Timeline
  • 21 APR 23:00Z
    wp-includes/formatting.php in WordPress before 3.3.2 attempts to enable clickable links inside attributes, which makes it easier for remote attackers to…
    cvelistv5