Description
WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer.
Remediation
References
Related Vulnerabilities
Joomla! Core 1.7.x Security Bypass (1.7.0 - 1.7.2)
MediaWiki Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2021-42040)
WordPress Plugin News Element Elementor Blog Magazine Local File Inclusion (1.0.5)
WordPress Plugin Fancy Product Designer-WooCommerce Cross-Site Scripting (4.5.0)
WordPress Plugin Backup Migration Information Disclosure (1.2.8)