CVE-2017-18527
published 2019-08-20CVE-2017-18527: The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
PriorityP335medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.69%
74.2th percentile
The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bestwebsoft | pagination | < 1.0.7 | 1.0.7 |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2017-18527 [MEDIUM] Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting
Pagination by BestWebSoft alert(document.domain)\">All")'
- 'contains(body_3, "Pagination by BestWebSoft")'
condition: and
# digest: 4b0a00483046022100c7fc7a541fc134f8015986cf8893497724b16176ea63955a59d7b33c84ed8565022100ccdff0c6bb88f391a4d0aa9f5692f460d69f271d22a9055860138d33f141358d:922c64590222798bb761d5b6d8e72950
No writeups or analysis indexed.
2019-08-20
Published