CVE-2017-18010

Опубликовано: 01 янв. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.

Ссылки

https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html
Exploit
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/smart-marketing-for-wp/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8974
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/145217/WordPress-Smart-Marketing-SMS-And-Newsletters-Forms-1.1.1-XSS.html
Exploit
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/smart-marketing-for-wp/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/8974
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:e-goi:smart_marketing_sms_and_newsletters_forms:*:*:*:*:*:*:*:*

Версия до 2.0.0 (исключая)

EPSS

Процентиль: 46%

0.00235

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-65rp-rxxc-7mgj