CVE-2018-5363

The CVE-2018-5363 entry concerns the WPGlobus plugin for WordPress (version 1.9.6). The vulnerability is a stored cross-site scripting (XSS) flaw triggered by passing malicious payloads in the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] parameters to wp-admin/...