Lucene search

K
wpvulndbWpvulndbWPVDB-ID:831E4A94-239C-4061-B66E-F5CA0DBB84FA
HistoryJun 10, 2020 - 12:00 a.m.

WordPress < 5.4.2 - Authenticated XSS in Block Editor

2020-06-1000:00:00
wpscan.com
15

Props to Sam Thomas (jazzy2fives) for finding an XSS issue where authenticated users with low privileges are able to add JavaScript to posts in the block editor.

Related for WPVDB-ID:831E4A94-239C-4061-B66E-F5CA0DBB84FA