CVE-2017-6814

MEDIUM 5.4CVE-2017-6814 · Published 12/03/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
wordpress wordpress	`≤ 4.7.2`	No fix yet

Description

In WordPress before 4.7.3, there is authenticated Cross-Site Scripting (XSS) via Media File Metadata. This is demonstrated by both (1) mishandling of the playlist shortcode in the wp_playlist_shortcode function in wp-includes/media.php and (2) mishandling of meta information in the renderTracks function in wp-includes/js/mediaelement/wp-playlist.js.

References

openwall.com/lists/oss-security/2017/03/06/8 · Exploit
debian.org/security/2017/dsa-3815 · Third Party Advisory
securityfocus.com/bid/96601 · Third Party Advisory
securitytracker.com/id/1037959 · Third Party Advisory
codex.wordpress.org/Version_4.7.3 · Patch
WordPress/WordPress commit 28f838c · Issue Tracking
sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html · Exploit
wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release · Patch
wpvulndb.com/vulnerabilities/8765 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free