[wp-trac] [WordPress Trac] #19014: Titles containing JavaScript execute the JavaScript - XSS risk

WordPress Trac wp-trac at lists.automattic.com
Thu Oct 20 14:53:02 UTC 2011


#19014: Titles containing JavaScript execute the JavaScript - XSS risk
--------------------------+----------------------
 Reporter:  dbvista       |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  General       |     Version:  3.2.1
 Severity:  major         |  Resolution:  invalid
 Keywords:                |
--------------------------+----------------------
Changes (by ryan):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Administrators and Editors have the unfiltered_html capability and are
 allowed to do this.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/19014#comment:3>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list