PT-2018-9406 · WordPress · Wp Ulike

Mallory Adams · Publicado 2018-06-26 · Atualizado 2018-08-20 · CVE-2018-1000508

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP ULike versions 2.8.1 through 3.1

Description The issue allows unauthorized users to perform administrative actions due to a Cross Site Scripting (XSS) vulnerability in the Settings screen. This can be exploited when an admin visits the logs page.

Recommendations For WP ULike versions 2.8.1 through 3.1, update to version 3.2 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1000508

Produtos afetados

Wp Ulike

Referências · 3

• 🔥 https://advisories.dxw.com/advisories/stored-xss-wp-ulike · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000508 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-1000508 · Aviso do Fabricante