CVE-2019-16219

WordPress before 5.2.3 allows XSS in shortcode previews...

CVE-2019-16222

WordPress before 5.2.3 has an issue with URL sanitization in wpksesbadprotocolonce in wp-includes/kses.php that can lead to cross-site scripting XSS attacks...

CVE-2019-16223

WordPress before 5.2.3 allows XSS in post previews by authenticated users...

CVE-2018-5776

WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement under wp-includes/js/mediaelement...

CVE-2017-9061

In WordPress before 4.7.5, a cross-site scripting XSS vulnerability exists when attempting to upload very large files, because the error message does not properly restrict presentation of the filename...

wordpress <3.3.1 wp-comments-post.php跨站脚本漏洞

No description provided by source...