CVE-2018-0579

🗓️ 14 May 2018 13:00:00Reported by jpcertType

cve🔗 web.nvd.nist.gov👁 43 Views🌐 WEB

Cross-site scripting vulnerability in Open Graph for Facebook, Google+ and Twitter Card Tags plugin for WordPres

Reporter	Title	Published	Views	Family All 10
CNVD	WordPress Open Graph for Facebook, Google+ and Twitter Card Tags Plugin Cross-Site Scripting Vulnerability	27 Apr 201800:00	–	cnvd
Cvelist	CVE-2018-0579	14 May 201813:00	–	cvelist
EUVD	EUVD-2018-1389	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#08386386: WordPress plugin "Open Graph for Facebook, Google+ and Twitter Card Tags" vulnerable to cross-site scripting	27 Apr 201800:00	–	jvn
Japan Vulnerability Notes	WordPress plugin "Open Graph for Facebook, Google+ and Twitter Card Tags" vulnerable to cross-site scripting	27 Apr 201806:01	–	jvn
NVD	CVE-2018-0579	14 May 201813:29	–	nvd
OpenVAS	WordPress Open Graph for Facebook, Google+ and Twitter Card Tags Plugin < 2.2.4.1 XSS Vulnerability	16 May 201800:00	–	openvas
Prion	Cross site scripting	14 May 201813:29	–	prion
wpexploit	Open Graph for Facebook, Google+ and Twitter Card Tags <= 2.2.4 - Authenticated Reflected XSS	20 Jun 201800:00	–	wpexploit
WPVulnDB	Open Graph for Facebook, Google+ and Twitter Card Tags <= 2.2.4 - Authenticated Reflected XSS	20 Jun 201800:00	–	wpvulndb

NVD

Vulners

Node

webdados open_graph_for_facebook,_google+_and_twitter_card_tagsRange<2.2.4.1wordpress

[
  {
    "product": "Open Graph for Facebook, Google+ and Twitter Card Tags",
    "vendor": "Webdados",
    "versions": [
      {
        "status": "affected",
        "version": "prior to version 2.2.4.1"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/
jvn	www.jvn.jp/en/jp/JVN08386386/index.html

Parameter	Position	Path	Description	CWE
wd_fb_og_error	query param	/wp-admin/post.php?post=20&action=edit&wd_fb_og_status=-2&wd_fb_og_error=<script>alert(1)<%2Fscript>	Reflected XSS via wd_fb_og_error parameter in Open Graph plugin on WordPress post edit page	CWE-79

21 Nov 2024 03:38Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00192

CWE-79