CVE-2018-20838: MAGAZINE3 Amp For Wp

Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days.

ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.

Affected products

• MAGAZINE3 Amp For Wp: before 0.9.97.21 (fixed in 0.9.97.21)

Published 2019-05-13. Last modified 2026-06-17.