| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | ≤ 4.8.2 |
WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free