Description
Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or data: URL.
Remediation
References
Related Vulnerabilities
WordPress Plugin Media Library Assistant Multiple Cross-Site Scripting Vulnerabilities (2.73)
Django Incomplete Comparison with Missing Factors Vulnerability (CVE-2026-48587)
WordPress Plugin WP Users Exporter CSV Injection (1.4.2)
PmWiki Other Vulnerability (CVE-2005-3849)
Nexus Repository Manager CVE-2019-7238 Vulnerability (CVE-2019-7238)