CVE-2017-18503 – Twitter Cards Meta – Best Twitter Card Plugin for WordPress < 2.5.0 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-18503

The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS. El plugin twitter-cards-meta anterior a la versión 2.5.0 para WordPress tiene XSS. The twitter-cards-meta plugin before 2.5.0 for WordPress has XSS via several parameters. • https://wordpress.org/plugins/twitter-cards-meta/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •