An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php coming-soon_sub_title parameter.
References
Link | Resource |
---|---|
https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md | Exploit Third Party Advisory |
https://wpvulndb.com/vulnerabilities/9010 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2018-01-13 00:29
Updated : 2024-02-04 19:29
NVD link : CVE-2018-5660
Mitre link : CVE-2018-5660
CVE.ORG link : CVE-2018-5660
JSON object : View
Products Affected
responsive_coming_soon_page_project
- responsive_coming_soon_page
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')