CVE-2018-5365

The CVE-2018-5365 entry concerns the WPGlobus plugin for WordPress (version 1.9.6) and describes an XSS vulnerability in wp-admin/options.php exploited via the parameter wpglobus_option[selector_wp_list_pages][show_selector]. Multiple connected sources list this as stored XSS (and CSRF in some ad...