Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5189
HistorySep 29, 2017 - 12:33 a.m.

Cross-site Scripting (XSS)

2017-09-2900:33:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.003 Low

EPSS

Percentile

65.5%

Wordpress is vulnerable to cross-site scripting (XSS) attacks. A malicious user can pass a javascript: or data: URL to the link modal to inject and execute arbitrary Javascript.