Lucene search
NeorichiPATCHSTACK:632E9B1BBCE0644693412013B3567965HistoryJan 08, 2018 - 12:00 a.m.
WordPress Z-URL Preview plugin <= 1.6.2 - Cross-Site Scripting (XSS) vulnerability
2018-01-0800:00:00
Neorichi
patchstack.com
7
0.002 Low
EPSS
Percentile
51.6%
A Cross-Site Scripting (XSS) vulnerability found by Neorichi in WordPress Z-URL Preview plugin (versions <= 1.6.2). Vulnerable to Cross-Site Scripting via the class.zlinkpreview.php url parameter.
Solution
Update the WordPress Z-URL Preview plugin to the latest available version (at least 2.0.0).
| CPE | Name | Operator | Version |
|---|---|---|---|
| z-url preview | le | 1.6.2 |
Related
cve
cve
CVE-2017-18012
2018-01-01 08:29:00
nvd
nvd
CVE-2017-18012
2018-01-01 08:29:00
wpvulndb
wpvulndb
Z-URL Preview <= 1.6.2 - Cross-Site Scripting (XSS)
2017-12-05 00:00:00
prion
prion
Design/Logic Flaw
2018-01-01 08:29:00
cvelist
cvelist
CVE-2017-18012
2018-01-01 08:00:00