4 matches found
CVE-2017-18610
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
6.1CVSS6AI score
SaveExploits0References2
CVE-2017-18610
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
6.1CVSS6.1AI score0.01159EPSS
SaveExploits1References2
Code injection
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
4.3CVSS6AI score0.01159EPSS
SaveExploits1References2Affected Software1
CVE-2017-18610: Improper Neutralization of Input During Web Page Generation
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-group-id parameter...
6.1CVSS6.3AI score0.01159EPSS
SaveExploits1References2
20