CVE-2017-14726

Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor

published September 23, 2017

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02712 · 85.8th percentile
Published
2017-09-23T20:00Z
EPSS history
Timeline
  • 23 SEP 20:00Z
    Before version 4.8.2, WordPress was vulnerable to a cross-site scripting attack via shortcodes in the TinyMCE visual editor
    cvelistv5