Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4770
HistoryJul 28, 2017 - 3:02 a.m.

Cross-Site Scripting (XSS)

2017-07-2803:02:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

0.126 Low

EPSS

Percentile

95.5%

WordPress is vulnerable to cross-site scripting (XSS) attacks. The attacks are possible because the application does not filter unclosed HTML elements in attributes during the processing of shortcode tags.