medium5.4
CVE-2018-20986
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
Impact
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advancedcustomfields | Advanced Custom Fields | before 5.7.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/advanced-custom-fields/#developers
- https://www.advancedcustomfields.com/blog/acf-5-7-8-release/
- https://www.advancedcustomfields.com/changelog/
- https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-plugin-xss.html
- https://wordpress.org/plugins/advanced-custom-fields/#developers
- https://www.advancedcustomfields.com/blog/acf-5-7-8-release/
- https://www.advancedcustomfields.com/changelog/
- https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-plugin-xss.html