WordPress · Wordpress · CVE-2018-10102
Name of the Vulnerable Software and Affected Versions:
WordPress versions prior to 4.9.5
Description:
The issue arises from the version string not being properly escaped in the get the generator function, potentially leading to XSS in a generator tag.
Recommendations:
For versions prior to 4.9.5, update to version 4.9.5 or later to resolve the issue.