CVE-2018-16285

Опубликовано: 06 сент. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.

Ссылки

https://risataim.blogspot.com/2018/09/xss-en-plugin-userpro-de-wordpress.html
Exploit
Technical Description
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9124
Exploit
Third Party Advisory
https://risataim.blogspot.com/2018/09/xss-en-plugin-userpro-de-wordpress.html
Exploit
Technical Description
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9124
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:userproplugin:userpro:*:*:*:*:*:wordpress:*:*

Версия до 4.9.23 (включая)

EPSS

Процентиль: 82%

0.01634

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-m6r5-3v8m-hpw6