CVE-2018-5293

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page...

CVE-2018-5293

The CVE-2018-5293 entry concerns the WordPress GD Rating System plugin, version 2.3. It describes a Cross-Site Scripting (XSS) vulnerability exposed via the wp-admin/admin.php parameter on the gd-rating-system-tools page. This is a client-facing issue in the WordPress plugin code path that handle...