Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5194
HistorySep 29, 2017 - 3:46 a.m.

Cross-site Scripting (XSS)

2017-09-2903:46:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.003 Low

EPSS

Percentile

65.5%

Wordpress is vulnerable to cross-site scripting (XSS) attacks. The library does not encode template names before displaying them, allowing a malicious user to inject and execute arbitrary web script.