2 matches found
WordPress JSmol2WP <=1.07 - Cross-Site Scripting
WordPress JSmol2WP version 1.07 and earlier is vulnerable to cross-site scripting and allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter. id: CVE-2018-20462 info: name: WordPress JSmol2WP =1.07 - Cross-Site Scripting author: daffainfo severity: medium...
CVE-2018-20462
WordPress JSmol2WP plugin