CVE-2018-20986
NONE EPSS 56.7%
Published Aug 22, 20196y ago · Modified Jun 17, 20262w ago
Published Aug 22, 2019 6y ago
Last Modified Jun 17, 2026 2w ago
Description
The advanced-custom-fields (aka Elliot Condon Advanced Custom Fields) plugin before 5.7.8 for WordPress has XSS by authors.
Threat Intelligence
EPSS Exploit Probability
56.7% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| advancedcustomfields | advanced_custom_fields | * | <5.7.8 |
References 4
- wordpress.org https://wordpress.org/plugins/advanced-custom-fields/#developers
- advancedcustomfields.com https://www.advancedcustomfields.com/blog/acf-5-7-8-release/
- advancedcustomfields.com https://www.advancedcustomfields.com/changelog/
- www2.deloitte.com https://www2.deloitte.com/de/de/pages/risk/articles/wordpress-plugin-xss.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.