Description
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.
Remediation
References
Related Vulnerabilities
Oracle Application Server Other Vulnerability (CVE-2005-3446)
Oracle Database Server CVE-2020-2515 Vulnerability (CVE-2020-2515)
Joomla Improper Input Validation Vulnerability (CVE-2020-11890)
WebLogic CVE-2008-2578 Vulnerability (CVE-2008-2578)
WordPress Plugin SCORM Cloud For WordPress 'ajax.php' SQL Injection (1.0.6.6)