mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-07 17:36:58 +02:00
669 B
669 B
CVE-2018-8729
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped.