ID	47311
Created	Jan 04, 2019
Updated	Jul 07, 2020
Severity
Coverage	IPS (Regular DB) IPS (Extended DB)
Default Action	drop
Active
Affected OS	All
Affected App	PHP_app

Legend

Enabled/Available
Disabled/Not Avaliable

Update History

Date	Version	Detail
2019-01-04	13.518	*
2019-09-10	14.684	Name:FG-VD-18-165_WordPress. 0day:WordPress. Shortcode. Preview. XSS
2020-06-30	15.876	Status:disable:enable
2020-07-08	15.881	Default_action:pass:drop

Refine Search

Intrusion Prevention

WordPress.Shortcode.Preview.XSS

Description

This indicates an attack attempt against a Cross-Site Scripting (XSS) vulnerability in WordPress CMS.
The vulnerability is caused by inadequate input filtering of html encoded character which leads to XSS vulnerabilities in shortcode function. A remote attacker may be able to exploit this to execute arbitrary script code within the context of the application.