CVE-2018-6194 in Splashing Images Plugin信息

摘要

由 MITRE

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2018-01-24

披露

2018-01-30

管理

已接受

条目

VDB-112654

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

4.8 (NVD)

EPSS

0.01028

KEV

否

活动

非常低

部门

Hostingprovider

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-6194
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-6194
CVE Details	https://www.cvedetails.com/cve/CVE-2018-6194/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!