Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:5522
HistoryDec 04, 2017 - 4:24 a.m.

Cross-site Scripting (XSS)

2017-12-0404:24:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.001 Low

EPSS

Percentile

41.3%

Wordpress is vulnerable to cross-site scripting (XSS) attacks. Attackers can inject arbitrary webscript because the enclosure value is not correctly sanitized for RSS and Atom fields.