CVE-2018-5286

The WordPress GD Rating System plugin version 2.3 is affected by an XSS vulnerability in the gd-rating-system-about page, exploitable via the wp-admin/admin.php parameter. The CVE notes a cross-site scripting issue with I=P and Gained impact mainly on integrity, with no explicit exploit details p...

CVE-2018-5289

The CVE-2018-5289 entry concerns WordPress GD Rating System plugin version 2.3, which exposes a Directory Traversal vulnerability in the wp-admin/admin.php parameter for the gd-rating-system-information page. The CNVD/OpenVAS records corroborate a traversal flaw that can enable reading arbitrary ...

CVE-2018-5292

The CVE-2018-5292 entry applies to WordPress GD Rating System plugin version 2.3, where an XSS vulnerability exists in the gd-rating-system-information page. The flaw is triggered by XSS via the wp-admin/admin.php panel parameter, enabling arbitrary script injection. Affected product: GD Rating S...

CVE-2018-5290

The CVE-2018-5290 entry concerns WordPress GD Rating System plugin version 2.3, which suffers a directory traversal vulnerability in the gd-rating-system-transfer path via wp-admin/admin.php. This allows reading arbitrary files on the server (CNVD/OpenVAS details; CVSSv3 base 7.5, high). Patch st...

GD Rating System 2.3 - Multiple Vulnerabilities

The GD Rating System WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

WordPress GD Rating System Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.GD Rating System plugin is used in one of the rating plugin. A cross-site scripting vulnerability exists in version...

GD Rating System < 2.1 - XSS

The GD Rating System WordPress plugin was affected by a XSS security vulnerability...

Cross-site scripting vulnerability in Wordpress plugin gd-rating-system

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin gd-rating-system has an xss vulnerability due to improp...