WordPress Vulnerabilities

WordPress < 5.5.2 - Cross-Site Scripting (XSS) via Global Variables

Description

The release notes state:

"Thanks to Marc Montas from Sucuri for reporting an issue that could lead to XSS from global variables."

Affects WordPress

Fixed in WordPress 5.5.2
Fixed in WordPress 5.5.2

References

Classification

Type
XSS
CWE
CVSS

Miscellaneous

Original Researcher
Marc Montas from Sucuri
Verified
No

Timeline

Publicly Published
2020-10-29 (about 3 years ago)
Added
2020-10-29 (about 3 years ago)
Last Updated
2020-11-01 (about 3 years ago)

Other