Pular para o conteúdo
Ver todas as ameaças

CVE-2021-39202

Alvo: Não informado

Descrição

WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versions the widgets editor introduced in WordPress 5.8 beta 1 has improper handling of HTML input in the Custom HTML feature. This leads to stored XSS in the custom HTML widget. This has been patched in WordPress 5.8. It was only present during the testing/beta phase of WordPress 5.8.

Software
Não informado
Tipo Software
Core
CVE
CVE-2021-39202
Tags
Nâo informado
Data de publicação
09/09/2021
Última atualização
24/02/2022
Pontuação em CVSS 3.0
5.4
Médio
plugins premium WordPress