CVE-2016-1564

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbit...

Original description

The description as published by the source.

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2016-1564 wordpress Fixed in: 4.4.1+dfsg-1

References

advisory debian.org
patch codex.wordpress.org
patch wordpress.org
report twitter.com
web openwall.com
web securitytracker.com
web core.trac.wordpress.org
web wpvulndb.com