← All advisories

Medium severity5.4NVD Advisory· Published May 13, 2019· Updated Jun 17, 2026

CVE-2018-20838

CVE-2018-20838

Description

ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Magazine3/Amp For Wp
cpe:2.3:a:magazine3:amp_for_wp:*:*:*:*:*:wordpress:*:*
Range: <0.9.97.21
WordPress/AMP for WP plugindescription
WordPress/Amp For Wpllm-fuzzy
Range: <0.9.97.21

Patches

Vulnerability mechanics

References

4

www.wordfence.com/blog/2018/11/xss-injection-campaign-exploits-wordpress-amp-plugin/nvdExploitThird Party Advisory
plugins.trac.wordpress.org/browser/accelerated-mobile-pages/trunk/changelog.txtnvdRelease NotesThird Party Advisory
wordpress.org/plugins/accelerated-mobile-pages/nvdRelease NotesThird Party Advisory
ampforwp.com/critical-security-issues-has-been-fixed-in-0-9-97-20-version/nvd

News mentions

0

No linked articles in our index yet.