CVE-2017-12068

The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:event_list_project:event_list:0.7.9:*:*:*:*:wordpress:*:*

Information

Published : 2017-07-31 22:29

Updated : 2017-08-10 07:15


NVD link : CVE-2017-12068

Mitre link : CVE-2017-12068


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

event_list_project

  • event_list