• Resolved rebornishard

    (@rebornishard)


    for future release please add confirmation for it
    it’s located under update plug in
    miss click will reinstalling wordpress ??
    it’s bad if wordpress already updated for security
    example xss for 3.2.1
    thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    Reinstalling WP via the automatic upgrader will NOT roll back any official WP fixes. If you’re changing core code on your own, well … don’t ?? There’s no known XSS security hole on 3.2.1

    Thread Starter rebornishard

    (@rebornishard)

    https://wordpress.or.id/xss-vulnerability-pada-wordpress-3-2-1.html
    i get it from there, hmmm i click re-install , then i must re edit it again lol :p

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    ?????? Advisor and Activist

    That’s not a vulnerability.

    Per Andrew Nacin:

    This is bogus, as usual. Folks, this isn’t rocket science: Administrators and editors are allowed to post unfiltered HTML in titles and content. It’s been like that for years. Nothing has suddenly changed.

    This is a weekly occurrence — someone supposedly knowledgable about web security publishes a blatantly obvious “How did they miss that?” security vulnerability without doing any testing or research. Everyone believes them and no one searches Google first.

    <script>alert(1)</script>? Really? I mean, come on. Yeah, you’re right, we totally missed that one. ??

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[fatal] re-install wordpress’ is closed to new replies.