exploitDog

CVE-2017-18612

Опубликовано: 13 сент. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.

Ссылки

https://rastating.github.io/wp-whois-domain-reflected-xss/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wp-whois-domain/#developers
Release Notes
Vendor Advisory
https://rastating.github.io/wp-whois-domain-reflected-xss/
Exploit
Third Party Advisory
https://wordpress.org/plugins/wp-whois-domain/#developers
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:netattingo:wp-whois-domain:1.0.0:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 61%

0.00408

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-qmmc-j6f9-89r4

CVSS3: 6.1

github

больше 3 лет назад

The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.

EPSS

Процентиль: 61%

0.00408

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79