Description
The Custom Fields component not correctly filter inputs, leading to a XSS vector.
Remediation
References
Related Vulnerabilities
WordPress Plugin Recently Multiple Vulnerabilities (3.0.4)
Atlassian Jira Missing Authorization Vulnerability (CVE-2020-14185)
WordPress Plugin Zotpress SQL Injection (6.1.2)
WordPress Plugin SecuPress Pro Security Bypass (1.4.12)
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)