CVE-2016-11001

The user-submitted-posts plugin before 20160215 for WordPress has XSS via the user-submitted-content field.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-09-20

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• User Submitted Posts (Plugin-planet)

References

• https://wordpress.org/plugins/user-submitted-posts/#developers
• https://www.securityfocus.com/archive/1/537616/30/0/threaded