CVE-2017-18611

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...

CVE-2017-18611

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWPCreateCustomFieldPage.php custom-field-css parameter...

CVE-2017-18611

The CVE refers to the WordPress plugin Magic Fields, affected versions prior to 1.7.2. An XSS vulnerability exists via the RCCWP_CreateCustomFieldPage.php; the custom-field-css parameter can inject script, potentially impacting users who load vulnerable pages. Remediation is to upgrade the Magic ...