Find real vulnerabilities before they ship
In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could modify new comments made by users with greater privileges, possibly causing XSS.
Base Score
5.4
| Base Score | 5.4 |
|---|---|
| Vector String | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| Base Severity | Medium |
| Version | 3.0 |
| Attack Vector (AV) | NETWORK |
