WordPress before 5.2.3 allows XSS in shortcode previews...
6.1CVSS2.7AI score0.01889EPSS
SaveExploits0
Debian CVE•added 2019/09/11 1:7 p.m.•51 views
CVE-2019-16222
WordPress before 5.2.3 has an issue with URL sanitization in wpksesbadprotocolonce in wp-includes/kses.php that can lead to cross-site scripting XSS attacks...
