Security Advisory

CVE-2018-10102

6.1
MEDIUM

Vulnerability Description

Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.
Published Date April 16, 2018
Official Source NIST NVD Advisory