The tabs-responsive plugin 1.8.0 for WordPress has XSS via the post_title parameter to wp-admin/post.php.
References
Link | Resource |
---|---|
https://github.com/d4wner/Vulnerabilities-Report/blob/master/tabs-responsive.md | Exploit Third Party Advisory |
https://wordpress.org/support/topic/stored-xss-bugs-at-the-latest-version-of-tabs-responsive/ | Broken Link |
Configurations
History
No history.
Information
Published : 2018-01-09 05:29
Updated : 2024-02-04 19:29
NVD link : CVE-2018-5312
Mitre link : CVE-2018-5312
CVE.ORG link : CVE-2018-5312
JSON object : View
Products Affected
wpshopmart
- tabs_responsive
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')