Lucene search

K
wpvulndbWpvulndbWPVDB-ID:140EECE9-0CF9-4E0F-81C9-C22955588548
HistorySep 05, 2019 - 12:00 a.m.

WordPress 5.2.2 - Authenticated Cross-Site Scripting (XSS) in Post Previews

2019-09-0500:00:00
wpscan.com
61

EPSS

0.005

Percentile

77.7%

From the WordPress version release: “Props to Simon Scannell of RIPS Technologies for finding and disclosing two issues. The first, a cross-site scripting (XSS) vulnerability found in post previews by contributors. The second was a cross-site scripting vulnerability in stored comments.”