2 matches found
CVE-2018-20838
The AMP for WP plugin for WordPress is vulnerable to stored Cross-Site Scripting (XSS) in versions prior to 0.9.97.21 . The root cause is a lack of proper validation of client-side data by the web application within the ampforwp_save_steps_data function. An attacker can exploit this flaw to execu...
5.4CVSS5.5AI score0.01058EPSS
SaveIn wildExploits1References4Affected Software1
20