cve/cves/2016/CVE-2016-1564.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-23 16:35:19 +00:00

Files

T

0xMarcio 82ab6a1c19 Fix PoC discovery, freshness and source validation

2026-10-06 23:23:48 +02:00

702 B

Raw Permalink Blame History

CVE-2016-1564

Description

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.

702 B

Raw Permalink Blame History

CVE-2016-1564

Description

POC

Reference

Github

702 B Raw Permalink Blame History

CVE-2016-1564

Description

POC

Reference

Github

702 B

Raw Permalink Blame History