WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-94153)

WordPress is a PHP, MySQL and JavaScript based project and uses Node as its JavaScript dependency. A native development environment is available for getting up and running quickly. An XSS vulnerability exists in WordPress in version 5.8 beta 1, which is related to the affected version not properly filtering user input. The introduced widget editor mishandles HTML input in the custom HTML functionality, which can lead to XSS being stored in the custom HTML widget. an attacker could exploit this vulnerability to obtain an administrator cookie.