WPGlobus plugin Stored XSS & CSRF security vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2018-5361 · ADVISORY
• WPGlobus/WPGlobus · PACKAGE
• d4wner/Vulnerabilities-Report · WEB
• wpvulndb.com/vulnerabilities/9003 · WEB

Lỗ hổng khác của wpglobus/wpglobus

• CVE-2018-5367TRUNG BÌNH 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[post_type][post] parameter to wp-admin/options.php.
• CVE-2018-5366TRUNG BÌNH 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[more_languages] parameter to wp-admin/options.php.
• CVE-2018-5365TRUNG BÌNH 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options…
• CVE-2018-5364TRUNG BÌNH 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/option…
• CVE-2018-5363TRUNG BÌNH 4.8The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or…