WordPress Vulnerabilities
WordPress < 5.8.3 - Author+ Stored XSS via Post Slugs
Description
Low-privileged authenticated users (like author) in WordPress core are able to execute JavaScript/perform stored XSS attack via post slugs, which can affect high-privileged users.
Affects WordPress
Fixed in WordPress 5.8.3
Fixed in WordPress 5.8.3
Fixed in WordPress 5.8.3
Fixed in WordPress 5.7.5
Fixed in WordPress 5.7.5
Fixed in WordPress 5.7.5
Fixed in WordPress 5.7.5
Fixed in WordPress 5.7.5
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.6.7
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.5.8
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.4.9
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.3.11
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.2.14
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.1.12
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 5.0.15
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.9.19
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.8.18
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.7.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.6.22
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.5.25
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.4.26
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.3.27
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.2.31
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.1.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 4.0.34
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.9.35
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.8.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
Fixed in WordPress 3.7.37
References
Classification
Miscellaneous
Original Researcher
Karim El Ouerghemmi and Simon Scannell of SonarSource
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2022-01-06 (about 2 years ago)
Added
2022-01-06 (about 2 years ago)
Last Updated
2022-04-13 (about 2 years ago)