CVE-2018-20838

MEDIUM

magazine3 amp_for_wp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2018-20838 has a selected CVSS score of 5.4 (medium).

Description

ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Nov 20, 2018 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

1
ProductSourceVersion range

amp_for_wp

Browse magazine3 / amp_for_wp
VulnCheckVersion data not supplied

References

5