CVE-2018-20838: XSS
Published May 13, 2019
·Updated
ampforwpsavestepsdata in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.
Affected Software
1 affected component
Magazine3 Amp For Wp Wordpress<0.9.97.21
Event History
May 13, 2019
CVE Published
via MITRE·04:04 AM
Data Sourced
via MITRE·04:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20838?
The severity of CVE-2018-20838 is medium.
2
What does CVE-2018-20838 allow?
CVE-2018-20838 allows stored cross-site scripting (XSS) attacks.
3
What software versions are affected by CVE-2018-20838?
All versions of AMP for WP plugin before 0.9.97.21 for WordPress are affected by CVE-2018-20838.
4
How can I fix CVE-2018-20838?
To fix CVE-2018-20838, update to version 0.9.97.21 or later of the AMP for WP plugin for WordPress.
5
Where can I find more information about CVE-2018-20838?
You can find more information about CVE-2018-20838 on the AMP for WP website, the Accelerated Mobile Pages plugin changelog, and the WordPress plugin page.