CVE · Medium

CVE-2018-20838 — AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages] < 0.9.97.21

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2018-20838 AMP for WP – Accelerated Mobile Pages [accelerated-mobile-pages] < 0.9.97.21 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 5.4 < 0.9.97.21 0.9.97.21 2018-11-20

CVE-2018-20838

The AMP for WP – Accelerated Mobile Pages plugin before version 0.9.97.21 contained a stored cross-site scripting vulnerability that allowed attackers to inject and persist malicious scripts within the application.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.