CVE Database · CVE-2018-10102
CVSS v3.1
N/A
EPSS
5.26%
Published
Apr 16, 2018
Modified
Nov 21, 2024
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.
Weaknesses (CWE)
Affected Products (3)
References (18)
