Lucene search
WpvulndbWPEX-ID:23553517-34E3-40A9-A406-F3FFBE9DD265HistoryDec 13, 2019 - 12:00 a.m.
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
2019-12-1300:00:00
wpvulndb
92
0.002 Low
EPSS
Percentile
64.4%
The function wp_targeted_link_rel() can be used in a particular way to result in a Stored Cross-Site Scripting (XSS) vulnerability.
<a href="#" title=" target='abc' rel= onmouseover=alert(/XSS/) ">This is a PoC for a Stored XSS</a>Related
hackerone
hackerone
WordPress: Potential unprivileged Stored XSS through wp_targeted_link_rel
2019-03-14 21:37:27
wpvulndb
wpvulndb
WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links
2019-12-13 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-01-09 08:07:52
cvelist
cvelist
CVE-2019-16773
2020-01-09 02:00:16
cve
cve
CVE-2019-16773
2020-01-09 02:15:13
nvd
nvd
CVE-2019-16773
2020-01-09 02:15:13
openvas
openvas
WordPress Multiple Vulnerabilities (Dec 2019) - Windows
2019-12-16 00:00:00
WordPress Multiple Vulnerabilities (Dec 2019) - Linux
2019-12-16 00:00:00