CVE

CVE-2020-36172

admin

CVE-2020-36172

The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.

Source: CVE-2020-36172

Exit mobile version