CVE-2017-9061

State: Published
Severity: Not scored
Published: May 18, 2017
Updated: Aug 5, 2024
Reserved: May 18, 2017

Description

In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

1038520vdb-entry
https://wordpress.org/news/2017/05/wordpress-4-7-5/
DSA-3870vendor-advisory
https://wpvulndb.com/vulnerabilities/8819
98509vdb-entry
https://codex.wordpress.org/Version_4.7.5
https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.