Description
Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template name.
Remediation
References
Related Vulnerabilities
WordPress Plugin Arlo training and event management system Cross-Site Scripting (2.1.7.1)
Apache HTTP Server CVE-2018-1283 Vulnerability (CVE-2018-1283)
WordPress Plugin WP Hotel Booking Remote Code Execution (1.10.2)
WordPress Plugin WooCommerce Product Feed Manager Security Bypass (2.2.3)
WordPress Plugin iQ Block Country Unspecified Vulnerability (1.1.33)