WordPress · Report #224556
Self-XSS in WordPress Editor Link Modal
Validstatus
lowseverity
8upvotes
8 Nov 2017disclosed
Summary
A self-xss was found in the link modal of the WordPress editor and fixed in the WordPress 4.8.2 release.
Was a self-xss on the link modal and the WordPress team were very helpful and they made a patch for the bug happy to work with them :)
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.