CVE-2016-9263

MEDIUM · CVSS 4.7 EPSS 2.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-10-12 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-9263

Severity

MEDIUM

CVSS

4.7

EPSS

2.17%

WordPress

Original NVD Description

WordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows remote attackers to conduct cross-domain Flash injection (XSF) attacks by leveraging code contained within the wp-includes/js/mediaelement/flashmediaelement.swf file.