Description
Before WordPress 4.9.5, the version string was not escaped in the get_the_generator function, and could lead to XSS in a generator tag.
Remediation
References
Related Vulnerabilities
WordPress Plugin Redirection Multiple Cross-Site Scripting Vulnerabilities (2.2.11)
WordPress Plugin Viral Quiz Maker-OnionBuzz SQL Injection (1.2.1)
Caddy Web Server Authentication Bypass by Spoofing Vulnerability (CVE-2023-50463)
PostgreSQL Other Vulnerability (CVE-2002-0802)
MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7321)