WordPress · Report #299112
MediaElements XSS
Validstatus
highseverity
9upvotes
15 Feb 2018disclosed
Summary
The reporter disclosed a reflected XSS vulnerability in MediaElement's Flash files, which are bundled in WordPress.
MediaElement and WordPress released versions 4.2.8 and 4.9.2, respectively, which resolve the issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.