CVE-2015-3440: debian debian_linux Cross-site Scripting
Vulnerability summary
CVE-2015-3440 is a high (CVSS 7.2) Cross-site Scripting vulnerability in debian debian_linux. EPSS estimates a 16.89% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities. 4 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 03-08-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via a long comment that is improperly stored because of limitations on the MySQL TEXT data type.
CVSS metrics
2 scores · 2 sources · 2 versionsEPSS trend
Probability
16.89%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.89% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (klikki.fi)
Maturity: unknown
Exploit Reference (seclists.org)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian2 products
- wordpress< 4.2.1+dfsg-1
- debian_linuxEOL7.0 | 8.0
Wordpress2 products
- wordpress≥ 4.0, ≤ 4.0.3 (fixed in 4.0.4) | ≥ 4.1, ≤ 4.1.3 (fixed in 4.0.4) | 4.2 (fixed in 4.0.4)
- wordpress≤ 4.2
Mageia1 product
- wordpress< 3.9.6-1.mga4
3 vendors · 5 products
References
21 links- lists.fedoraproject.org/pipermail/package-announce/2015-May/157391.htmlVendor AdvisoryX Refsource FEDORA
- codex.wordpress.org/Version_4.2.1X Refsource CONFIRM
- wpvulndb.com/vulnerabilities/7945X Refsource MISC
- lists.fedoraproject.org/pipermail/package-announce/2015-May/158278.htmlVendor AdvisoryX Refsource FEDORA
- core.trac.wordpress.org/changeset/32299X Refsource CONFIRM
Show all 21 references
- lists.fedoraproject.org/pipermail/package-announce/2015-May/158271.htmlVendor AdvisoryX Refsource FEDORA