Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22238
HistoryDec 30, 2019 - 4:18 a.m.

Cross-Site Scripting (XSS)

2019-12-3004:18:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.002 Low

EPSS

Percentile

56.1%

wordpress is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject arbitrary Javascript into a user’s browser via malicious links due to insufficient validation and sanitization in the function wp_targeted_link_rel in wp-includes/formatting.php.