CVE-2015-5733
EPSS 1.5%Published: 11/9/2015Modified: 5/27/2026
Description
Cross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp-admin/js/nav-menu.js in WordPress before 4.2.4 allows remote attackers to inject arbitrary web script or HTML via an accessibility-helper title.
Affected packages (1)
- Debian/wordpressfrom 0, < 4.2.4+dfsg-1