Lucene search
PRIOn knowledge basePRION:CVE-2018-16363HistorySep 07, 2018 - 10:29 p.m.
Cross site request forgery (csrf)
2018-09-0722:29:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
34.1%
The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php and there is an echo of lang in lib\wpfilemanager.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_manager | eq | 2.9 |
Related
patchstack
patchstack
cvelist
cvelist
CVE-2018-16363
2018-09-07 22:00:00
cve
cve
CVE-2018-16363
2018-09-07 22:29:01
wpexploit
wpexploit
File Manager < 3.0 - Authenticated Reflected Cross-Site Scripting (XSS)
2018-09-06 00:00:00
wpvulndb
wpvulndb
File Manager < 3.0 - Authenticated Reflected Cross-Site Scripting (XSS)
2018-09-06 00:00:00
nvd
nvd
CVE-2018-16363
2018-09-07 22:29:01