Unrated
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions.
CVE-2019-13478
First seen on SecPulse
References
- advisory github.com
- advisory wpvulndb.com