Description In WordPress before 4.7.3 (wp-admin/js/tags-box.js), there is cross-site scripting (XSS) via taxonomy term names. Remediation References CVE-2017-6818 Related Vulnerabilities WordPress Plugin WP Mail Logging Multiple Unspecified Vulnerabilities (1.5.0) WordPress Plugin YITH WooCommerce Advanced Reviews Security Bypass (1.3.9) MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-7295) Zope Web Application Server Other Vulnerability (CVE-2001-1227) ProjectSend Incorrect Authorization Vulnerability (CVE-2024-11680) Severity Medium Classification CVE-2017-6818 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities