CVE-2018-16254

creationtimestamp| type| source ---|---|--- 2019-04-15 14:39:15+00:00| seen| https://t.me/cibsecurity/3707...

CVE-2018-16254

Summary: CVE-2018-16254 concerns an XSS vulnerability in the WordPress plugin WP All Import (version 3.4.9) exposed via the parameter action=options. The vulnerability is described as exploitable by a logged-in administrator; the vendor states it is not a vulnerability. The linked OpenVAS entry c...