CVE-2018-20838

概要

参考情報

• ampforwp.com/critical-security-issues-has-been-fixed-in-0-9-97-20-version
• plugins.trac.wordpress.org/browser/accelerated-mobile-pages/trunk/changelog.txt · Release Notes
• wordpress.org/plugins/accelerated-mobile-pages · Release Notes
• wordfence.com/blog/2018/11/xss-injection-campaign-exploits-wordpress-amp-plugin · Exploit

amp for wp のその他の脆弱性

• CVE-2023-6782中 5.4The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in…
• CVE-2023-48321中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmed Kaludi, Mohammed Kaludi AMP for …