CVE-2018-20150

CVE Database · CVE-2018-20150

· N/AModified

CVSS v3.1

N/A

EPSS

5.05%

Published

Dec 14, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.

Weaknesses (CWE)

CWE-79

Affected Products (4)

wordpress · wordpress (up to 4.9.9)vulnerable

wordpress · wordpress (up to 5.0.1)vulnerable

debian · debian_linuxvulnerable

References (18)

Third Party AdvisoryVDB Entry

ProductVendor Advisory

PatchThird Party Advisory

Mailing ListThird Party Advisory

Release NotesVendor Advisory