Security Advisory
CVE-2018-9034
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter.