PT-2019-8532
CVE-2017-18601
·
Published
2019-09-10
·
Updated
2019-09-10
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
examapp plugin version 1.0 for WordPress
Description
The issue concerns a cross-site scripting (XSS) flaw via exam input text fields. This allows for potential malicious script injection. No information is provided about the estimated number of affected devices or real-world incidents.
Recommendations
For examapp plugin version 1.0, consider disabling the exam input text fields until a patch is available to prevent potential XSS attacks.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾