Lucene search
Stefan BroederPATCHSTACK:69691AF0CD34A53BE9878CF1768F6120HistoryApr 09, 2018 - 12:00 a.m.
WordPress Relevanssi plugin <=4.0.4 - Cross-Site Scripting (XSS) vulnerability
2018-04-0900:00:00
Stefan Broeder
patchstack.com
2
EPSS
0.001
Percentile
44.5%
Cross-Site Scripting (XSS) vulnerability found in WordPress Relevanssi plugin (versions <=4.0.4). Attackers can inject arbitrary JavaScript or HTML via the GET parameter.
Solution
09.04.2018 - Several sources claim that you need to update to the version 4.1, but we were unable to find this version on the plugin page at WordPress.org
Related
packetstorm
packetstorm
WordPress Relevanssi 4.0.4 Cross Site Scripting
2018-03-31 00:00:00
wpvulndb
wpvulndb
Relevanssi <= 4.0.4 - Cross-Site Scripting (XSS)
2018-03-30 00:00:00
exploitdb
exploitdb
WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting
2018-03-30 00:00:00
cve
cve
CVE-2018-9034
2018-04-04 19:29:00
prion
prion
Cross site scripting
2018-04-04 19:29:00
exploitpack
exploitpack
WordPress Plugin Relevanssi 4.0.4 - Reflected Cross-Site Scripting
2018-03-30 00:00:00
cvelist
cvelist
CVE-2018-9034
2018-04-04 19:00:00
nvd
nvd
CVE-2018-9034
2018-04-04 19:29:00
zdt
zdt