Description
WordPress before 5.5.2 allows XSS associated with global variables.
Remediation
References
Related Vulnerabilities
EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-33659)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-3734)
WordPress Plugin WP Symposium Multiple Vulnerabilities (14.05.02)
Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-33034)
WordPress Plugin Limit Login Attempts Reloaded Security Bypass (2.7.4)