2 matches found
CVE-2018-16285
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userproshortcodetemplate action to wp-admin/admin-ajax.php...
6.1CVSS6AI score0.01345EPSS
SaveExploits2References2
CVE-2018-16285: Improper Neutralization of Input During Web Page Generation
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userproshortcodetemplate action to wp-admin/admin-ajax.php...
6.1CVSS6.3AI score0.01345EPSS
SaveExploits2References2
20