system
Describe <CVE-2020-36172>.
user
What is <CVE-2020-36172>?
assistant
The Advanced Custom Fields plugin before 5.8.12 for WordPress mishandles the escaping of strings in Select2 dropdowns, potentially leading to XSS..