Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21502
HistorySep 12, 2019 - 12:32 p.m.

Cross-site Scripting (XSS)

2019-09-1212:32:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15

EPSS

0.005

Percentile

77.6%

wordpress is vulnerable to cross-site scripting (XSS). The attack is due to lack of sanitization of URL in wp_kses_bad_protocol_once in wp-includes/kses.php.