The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or any other language) parameter to wp-admin/options.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-01-12T09:00:00

Updated: 2024-08-05T05:33:44.103Z

Reserved: 2018-01-12T00:00:00

Link: CVE-2018-5363

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-01-12T09:29:01.323

Modified: 2024-11-21T04:08:39.463

Link: CVE-2018-5363

cve-icon Redhat

No data.