Plupload Cross-site Scripting (XSS) Vulnerability - CVE-2016-4566 - Vulnerability Database

Plupload Cross-site Scripting (XSS) Vulnerability - CVE-2016-4566

Medium

Reference: CVE-2016-4566

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-4566

Title: Plupload Cross-site Scripting (XSS) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9 as used in WordPress before 4.5.2 allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.