PT-2018-8934 · WordPress · Events Manager

Daichi Takaki · Publicado 2018-05-14 · Atualizado 2024-10-08 · CVE-2018-0576

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Events Manager plugin versions prior to 5.9 for WordPress

Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to cross-site scripting.

Recommendations For versions prior to 5.9, update to version 5.9 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-0576

Produtos afetados

Events Manager

Referências · 6

• https://osv.dev/vulnerability/CVE-2018-0576 · Aviso do Fabricante
• https://wordpress.org/plugins/events-manager/#developers · Aviso do Fabricante
• https://t.me/cvenotify/97414 · Publicação no Telegram
• http://jvn.jp/en/jp/JVN85531148/index.html · Nota
• https://wpvulndb.com/vulnerabilities/9609 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0576 · Nota de Segurança