CVE Vulnerability

CWE-79

CVE-2018-20977

by

The all-in-one-schemaorg-rich-snippets plugin before 1.5.0 for WordPress has XSS on the settings page.

CVE-2018-20978

by

The wp-all-import plugin before 3.4.7 for WordPress has XSS.

CVE-2018-20982

by

The media-library-assistant plugin before 2.74 for WordPress has XSS via the Media/Assistant or Settings/Media Library assistant admin submenu screens.

CVE-2018-20983

by

The wp-retina-2x plugin before 5.2.3 for WordPress has XSS.

CVE-2018-20986

by

The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.

CVE-2018-20928

by

cPanel before 70.0.23 allows stored XSS via the cpaddons vendor interface (SEC-391).