CVSS 3.0
5.4 mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NCVE-2018-20838
Medium (5.4) in magazine3 amp for wp. EPSS 1.1% chance of exploitation in the next 30 days.
ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- magazine3:amp_for_wp
References
- https://ampforwp.com/critical-security-issues-has-been-fixed-in-0-9-97-20-version/
- https://plugins.trac.wordpress.org/browser/accelerated-mobile-pages/trunk/changelog.txt
- https://wordpress.org/plugins/accelerated-mobile-pages/#developers
- https://www.wordfence.com/blog/2018/11/xss-injection-campaign-exploits-wordpress-amp-plugin/
- https://ampforwp.com/critical-security-issues-has-been-fixed-in-0-9-97-20-version/