CVE-2018-5667

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. XSS exists via the wp-admin/options-general.php rnuusernamevalidationpattern parameter...

CVE-2018-5667

CVE-2018-5667 affects the WordPress plugin read-and-understood (version 2.1) . A cross-site scripting (XSS) vulnerability exists exposed by the parameter rnu_username_validation_pattern in the file wp-admin/options-general.php . The issue arises from how user-supplied input is handled, enabling i...