CVE-2018-5362

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][page] parameter to wp-admin/options.php.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2018-01-12

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Wpglobus (Wpglobus)

References

• https://github.com/d4wner/Vulnerabilities-Report/blob/master/wpglobus.md
• https://wpvulndb.com/vulnerabilities/9003