CVE-2017-18611

The CVE refers to the WordPress plugin Magic Fields, affected versions prior to 1.7.2. An XSS vulnerability exists via the RCCWP_CreateCustomFieldPage.php; the custom-field-css parameter can inject script, potentially impacting users who load vulnerable pages. Remediation is to upgrade the Magic ...

CVE-2017-18609

The CVE-2017-18609 entry concerns the WordPress plugin magic-fields, specifically versions before 1.7.2, which is vulnerable to cross-site scripting via the custom-write-panel-id parameter. Affected component: magic-fields plugin for WordPress. Root cause: XSS vulnerability in handling the custom...

CVE-2017-18610

The CVE-2017-18610 issue affects the WordPress plugin “magic-fields” (before 1.7.2). The vulnerability is an XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter, as reported across multiple sources (Red Hat, CNVD, NVD mirrors, OSV, CVE lists). Impact described in sources is clie...