← Back to CVE List

CVE-2019-16222

Published: 2019-09-11T14:15Z
Last Modified: 2024-11-21T04:30Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site scripting (XSS) attacks. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt