An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. XSS exists via the wp-admin/admin.php button_text_link parameter.
References
Link | Resource |
---|---|
https://github.com/d4wner/Vulnerabilities-Report/blob/master/responsive-coming-soon-page.md | Exploit Third Party Advisory |
https://wpvulndb.com/vulnerabilities/9010 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2018-01-12 16:29
Updated : 2019-03-05 10:02
NVD link : CVE-2018-5663
Mitre link : CVE-2018-5663
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
responsive_coming_soon_page_project
- responsive_coming_soon_page