Lucene search
MitreCVELIST:CVE-2018-16363HistorySep 07, 2018 - 10:00 p.m.
CVE-2018-16363
2018-09-0722:00:00
mitre
www.cve.org
0.001 Low
EPSS
Percentile
34.1%
The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php and there is an echo of lang in lib\wpfilemanager.php.
Related
patchstack
patchstack
cve
cve
CVE-2018-16363
2018-09-07 22:29:01
wpexploit
wpexploit
File Manager < 3.0 - Authenticated Reflected Cross-Site Scripting (XSS)
2018-09-06 00:00:00
wpvulndb
wpvulndb
File Manager < 3.0 - Authenticated Reflected Cross-Site Scripting (XSS)
2018-09-06 00:00:00
prion
prion
Cross site request forgery (csrf)
2018-09-07 22:29:00
nvd
nvd
CVE-2018-16363
2018-09-07 22:29:01