CVE-2018-8729

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary J...

Original description

The description as published by the source.

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory wordpress.org
patch github.com
patch github.com
patch plugins.trac.wordpress.org
report exploit-db.com