exploitDog

CVE-2018-5316

Опубликовано: 09 янв. 2018

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.

Ссылки

https://packetstormsecurity.com/files/145459/WordPress-Sagepay-Server-Gateway-For-WooCommerce-1.0.7-XSS.html
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/sagepay-server-gateway-for-woocommerce/#developers
Third Party Advisory
https://wordpress.org/support/topic/sagepay-server-gateway-for-woocommerce-1-0-7-cross-site-scripting/#post-9792337
Third Party Advisory
https://packetstormsecurity.com/files/145459/WordPress-Sagepay-Server-Gateway-For-WooCommerce-1.0.7-XSS.html
Third Party Advisory
VDB Entry
https://wordpress.org/plugins/sagepay-server-gateway-for-woocommerce/#developers
Third Party Advisory
https://wordpress.org/support/topic/sagepay-server-gateway-for-woocommerce-1-0-7-cross-site-scripting/#post-9792337
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:patsatech:sagepay_server_gateway_for_woocommerce:*:*:*:*:*:wordpress:*:*

Версия до 1.0.9 (исключая)

EPSS

Процентиль: 84%

0.02338

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-4hgv-3mwq-cfmg

CVSS3: 6.1

github

больше 3 лет назад

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.

EPSS

Процентиль: 84%

0.02338

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79