CVE-2018-5286: gd rating system project gd rating system – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2018-5286

中危 6.1CVE-2018-5286 · Published 08/01/2018 · updated 17/06/2026

要点

CVE-2018-5286 是影响 gd rating system (gd rating system project) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：1.3%，高于 69.8% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
gd rating system gd_rating_system_project	`= 2.3`	No fix yet

Description

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page.

References

d4wner/Vulnerabilities-Report · Exploit
wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system · Broken Link
wpvulndb.com/vulnerabilities/8995 · Third Party Advisory

gd rating system 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free