[wp-trac] [WordPress Trac] #58336: Potential XSS on admin_body_class hook

WordPress Trac noreply at wordpress.org
Mon May 22 14:14:24 UTC 2023


#58336: Potential XSS on admin_body_class hook
----------------------------------------+-----------------------------
 Reporter:  rafiem                      |       Owner:  SergeyBiryukov
     Type:  defect (bug)                |      Status:  closed
 Priority:  normal                      |   Milestone:  6.3
Component:  Security                    |     Version:
 Severity:  normal                      |  Resolution:  fixed
 Keywords:  needs-unit-tests has-patch  |     Focuses:
----------------------------------------+-----------------------------
Changes (by SergeyBiryukov):

 * owner:  (none) => SergeyBiryukov
 * status:  new => closed
 * resolution:   => fixed


Comment:

 In [changeset:"55846" 55846]:
 {{{
 #!CommitTicketReference repository="" revision="55846"
 Administration: Add missing escaping for CSS classes on the body tag in
 the admin.

 Follow-up to [5892], [10823], [10868], [18882], [21014], [22000], [48060].

 Propos rafiem, costdev, dd32, audrasjb, westonruter, SergeyBiryukov.
 Fixes #58336.
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/58336#comment:8>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list