CVE-2018-18019

MEDIUM 6.1CVE-2018-18019 · Published 15/04/2019 · updated 17/06/2026

In short

CVE-2018-18019 is a MEDIUM (CVSS 6.1) vulnerability affecting slideshow gallery (tribulant).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
slideshow gallery tribulant	`= 1.6.8`	No fix yet

Description

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-slides&method=save Slide[title], Slide[media_file], or Slide[image_url] parameter.

References

ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html · Exploit
docs.google.com/document/d/1rwN4hJkD5TJfCa16rsGwzYhzL-ODd2VLkFnPvAIq4Ys/edit · Permissions Required

CVE-2018-18019

In short

Description

References

More vulnerabilities in slideshow gallery

CVE-2018-18019

In short

Description

References

More vulnerabilities in slideshow gallery