Description
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.
Unscored
CVE-2018-16285
EUVD-2018-8136GHSA-m6r5-3v8m-hpw6
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/a…
Published Sep 6, 2018 · Updated Aug 5, 2024 · Assigned by mitre