Lucene search
PRIOn knowledge basePRION:CVE-2018-17866HistoryOct 09, 2018 - 10:29 p.m.
Cross site scripting
2018-10-0922:29:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
49.2%
Multiple cross-site scripting (XSS) vulnerabilities in includes/core/um-actions-login.php in the “Ultimate Member - User Profile & Membership” plugin before 2.0.28 for WordPress allow remote attackers to inject arbitrary web script or HTML via the “Primary button Text” or “Second button text” field.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ultimate_member | lt | 2.0.28 |
Related
openvas
openvas
WordPress Ultimate Member Plugin < 2.0.28 XSS Vulnerability
2022-07-13 00:00:00
wpvulndb
wpvulndb
Ultimate Member < 2.0.28 - Multiple XSS
2018-10-06 00:00:00
nvd
nvd
CVE-2018-17866
2018-10-09 22:29:00
cve
cve
CVE-2018-17866
2018-10-09 22:29:00
cvelist
cvelist
CVE-2018-17866
2018-10-09 22:00:00