CVE-2018-8729

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary J...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory wordpress.org
patch github.com
patch github.com
patch plugins.trac.wordpress.org
report exploit-db.com