CVE-2017-18528
published 2019-08-20CVE-2017-18528: The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
PriorityP336medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EXPLOIT
EPSS
1.76%
75.1th percentile
The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bestwebsoft | pdf_print | < 1.9.4 | 1.9.4 |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting
nuclei·CVSS 6.1
CVE-2017-18528 [MEDIUM] PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting
PDF & Print by BestWebSoft alert(document.domain)\">All")'
- 'contains(body_3, "PDF & Print by BestWebSoft")'
condition: and
# digest: 490a0046304402206a54e792239cc72ff350573253df632071694e7388df027107016c27ffb841d80220478227b8f6a3cf00d95b5169e4cb234218c75dc576e55ef5ef8634853c888357:922c64590222798bb761d5b6d8e72950
No writeups or analysis indexed.
2019-08-20
Published