Description
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS.
Unscored
CVE-2020-36172
EUVD-2020-23750GHSA-cwwf-85g3-pxwf
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading …
Published Jan 6, 2021 · Updated Aug 4, 2024 · Assigned by mitre