5 matches found
CVE-2017-18609
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
CVE-2017-18609
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
CVE-2017-18609
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
CVE-2017-18609: Improper Neutralization of Input During Web Page Generation
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter...
PT-2019-8540
Name of the Vulnerable Software and Affected Versions magic-fields plugin versions prior to 1.7.2 Description The issue concerns a cross-site scripting XSS flaw. It is exploited via the custom-write-panel-id parameter. Recommendations For versions prior to 1.7.2, update to version 1.7.2 or later ...