Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5200
HistorySep 29, 2017 - 9:29 a.m.

Cross-site Scripting (XSS)

2017-09-2909:29:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.004 Low

EPSS

Percentile

73.2%

WordPress is vulnerable to cross-site scripting (XSS) attacks. The library does not escape tags in shortcode previews in the TinyMCE editor, allowing a malicious user to inject and execute arbitrary web script.