CVE-2018-20150

CVE-2018-20150

In WordPress versions before 5.0.1, crafted URLs could trigger XSS for certain use cases involving plugins.

Source: CVE-2018-20150