2018-12-14 20:00:00
mitre
PUBLISHED
In WordPress before 4.9.9 and 5.x before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.