CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2018/04/23 2:29 p.m.•26 views

CVE-2018-10234

Authenticated Cross site Scripting exists in the User Profile & Membership plugin before 2.0.11 for WordPress via the "Account Deletion Custom Text" input field on the wp-admin/admin.php?page=umoptions&section=account page...

4.8CVSS5.1AI score0.00631EPSS

SaveExploits1References2

Cvelist•added 2018/04/23 2:00 p.m.•33 views

CVE-2018-10234

5.1AI score0.00631EPSS

SaveExploits1References2

CVE•added 2018/04/23 2:00 p.m.•60 views

CVE-2018-10234

CVE-2018-10234: Authenticated Cross-Site Scripting in the WordPress User Profile & Membership plugin prior to 2.0.11, exploitable via the Account Deletion Custom Text field on wp-admin/admin.php?page=um_options&section=account. Impact is XSS authenticated users; remediation is to update to 2.0.11...

4.8CVSS5AI score0.00631EPSS

SaveExploits1References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/04/23 12:00 a.m.•4 views

CVE-2018-10234: Improper Neutralization of Input During Web Page Generation

4.8CVSS5.4AI score0.00631EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by