← Back to CVE List

CVE-2017-17094

Published: 2017-12-02T06:29Z
Last Modified: 2024-11-21T03:17Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt