EUVD-2018-13017

Malware in sbrugna...

JSmol2WP Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site.JSmol2WP Plugin is used in one of the plugin to support the view of the 3D chemical structure. A cross-site...

CVE-2018-20462

An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter...

CVE-2018-20463

An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF...

CVE-2018-20462

WordPress JSmol2WP plugin

CVE-2018-20463

The JSmol2WP plugin for WordPress (version 1.07 and earlier) is vulnerable to Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The root cause is a directory traversal vulnerability occurring via ../ sequences in the query=php://filter/resource= parameter of the jsmol.php query ...