Vulners
Lucene search
WordPress Plugin Tagregator 0.6 - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | WordPress Tagregator 0.6 Plugin - Cross-Site Scripting Vulnerability | 20 Aug 201800:00 | – | zdt |
 | WordPress Tagregator Plugin Cross-Site Scripting Vulnerability | 8 May 201800:00 | – | cnvd |
 | CVE-2018-10752 | 5 May 201802:00 | – | cve |
 | CVE-2018-10752 | 5 May 201802:00 | – | cvelist |
 | EUVD-2018-2822 | 7 Oct 202500:30 | – | euvd |
 | WordPress Plugin Tagregator 0.6 - Cross-Site Scripting | 20 Aug 201800:00 | – | exploitpack |
 | CVE-2018-10752 | 5 May 201802:29 | – | nvd |
 | CVE-2018-10752 | 5 May 201802:29 | – | osv |
 | WordPress Tagregator 0.6 Cross Site Scripting | 21 Aug 201800:00 | – | packetstorm |
 | Design/Logic Flaw | 5 May 201802:29 | – | prion |
10
# Exploit Title: WordPress Plugin Tagregator 0.6 - Cross-Site Scripting
# Date: 2018-05-05
# Exploit Author: ManhNho
# Vendor Homepage: https://wordpress.org/plugins/tagregator/
# Software Link: https://downloads.wordpress.org/plugin/tagregator.0.6.zip
# Ref: https://pastebin.com/ZGr5tyP2
# Version: 0.6
# Tested on: CentOS 6.5
# CVE : CVE-2018-10752
# Category : Webapps
# 1. Description
# WordPress Plugin Tagregator 0.6 - Stored XSS
# 2. Proof of Concept
1. Login to admin panel
2. Access to Wordpress Tagregator setting, then choose Tweets/Instagram
Media/Flickr Post/Google+ Activities and click "Add New" button
3. In title field, inject XSS pattern such as:
<script>alert('xss')</script> and click Preview button
4. This site will response url that will alert popup named xss
5. Send this xss url to another administrators, we have same alertData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Aug 2018 00:00Current
5.1Medium risk
Vulners AI Score5.1
CVSS 23.5
CVSS 34.8
EPSS0.00167