CVE-2018-18017

XSS exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&method=save Galleryid or Gallerytitle parameter...

CVE-2018-18017

CVE-2018-18017 applies to the Tribulant Slideshow Gallery plugin for WordPress (version 1.6.8). The vulnerability is a reflected XSS in the admin interface, exploitable via the wp-admin/admin.php?page=slideshow-galleries&method=save with Gallery[id] or Gallery[title] parameters. Public sources (N...