CVE-2019-16218

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

WordPress before 5.2.3 allows XSS in stored comments.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 11, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-162196.1WordPress before 5.2.3 allows XSS in shortcode previews.CVE-2019-16225.3A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attCVE-2019-162206.1In WordPress before 5.2.3, validation and sanitization of a URL in wp_validate_redirect in wp-includes/pluggable.php could lead to an open rCVE-2019-162216.1WordPress before 5.2.3 allows reflected XSS in the dashboard.CVE-2019-162226.1WordPress before 5.2.3 has an issue with URL sanitization in wp_kses_bad_protocol_once in wp-includes/kses.php that can lead to cross-site sCVE-2019-162235.4WordPress before 5.2.3 allows XSS in post previews by authenticated users.CVE-2019-162249.8An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leadingCVE-2019-162259.8An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leadingCVE-2019-162267.5An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an inCVE-2019-162279.8An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation wiCVE-2019-162287.5An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zeroCVE-2019-162294.1drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL poi
CVE-2019-16218: Medium severity, CVSS 6.1 | Vulnix