Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
WordPress Cross-Domain Flash Injection Vulnerability - CVE-2018-5776 - Vulnerability Database
WordPress

WordPress Cross-Domain Flash Injection Vulnerability - CVE-2018-5776

Medium
Reference: CVE-2018-5776
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-5776
Title: WordPress Cross-Domain Flash Injection Vulnerability
Overview:

WordPress is prone to a cross-domain Flash injection vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site allowing the attacker to steal cookie-based authentication credentials or to fool a user into inserting credentials on a fake Flash form. WordPress versions ranging from 0.70 and up to (and including) 3.6.1 are vulnerable.