CVE-2018-5776
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).
Published: 2018-01-18 · CVSS: Unscored
WordPress before 4.9.2 has XSS in the Flash fallback files in MediaElement (under wp-includes/js/mediaelement).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7