Description WordPress before 5.2.4 is vulnerable to stored XSS (cross-site scripting) via the Customizer. Remediation References CVE-2019-17674 Related Vulnerabilities MongoDb Other Vulnerability (CVE-2020-7929) Django Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2022-23833) Ruby on Rails Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2021-22885) Python Integer Overflow or Wraparound Vulnerability (CVE-2016-9063) WordPress Plugin RSVPMaker SQL Injection (5.6.3) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2019-17674