WPGlobus plugin Stored XSS & CSRF security vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-5361 · ADVISORY
• WPGlobus/WPGlobus · PACKAGE
• d4wner/Vulnerabilities-Report · WEB
• wpvulndb.com/vulnerabilities/9003 · WEB

wpglobus/wpglobus のその他の脆弱性

• CVE-2018-5367中 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post] parameter to wp-admin/options.php.
• CVE-2018-5366中 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.
• CVE-2018-5365中 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options…
• CVE-2018-5364中 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/option…
• CVE-2018-5363中 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or…