| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress | ≥ 5.0, < 5.0.1< 4.9.9 | 5.0.14.9.9 |
In WordPress before 4.9.9 and 5.x before 5.0.1, when the Apache HTTP Server is used, authors could upload crafted files that bypass intended MIME type restrictions, leading to XSS, as demonstrated by a .jpg file without JPEG data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free