CVE-2016-1000128

MEDIUMNuclei

WordPress anti-plagiarism <=3.60 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2016-1000128 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

Reflected XSS in wordpress plugin anti-plagiarism v3.60

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Nuclei templates

1
ProjectDiscoveryMEDIUMWordPress anti-plagiarism <=3.60 - Cross-Site ScriptingCVSS 6.1

WordPress anti-plagiarism 3.6.0 and prior are vulnerable to reflected cross-site scripting.

Impact

Attackers can execute arbitrary JavaScript in victims' browsers, potentially stealing session cookies, credentials, or performing actions on behalf of users.

Remediation

Update the WordPress anti-plagiarism plugin to version >3.60 or apply the latest security patches provided by the vendor.

WeaknessesCWE-79
Authorsdaffainfo
Template tagscve2016cvewordpressxsswp-pluginanti-plagiarism_projectvuln
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:anti-plagiarism_project:anti-plagiarism:*:*:*:*:*:wordpress:*:*
Google: inurl:"/wp-content/plugins/anti-plagiarism"
http://www.vapidlabs.com/wp/wp_advisory.php?v=161 https://wordpress.org/plugins/anti-plagiarism https://nvd.nist.gov/vuln/detail/CVE-2016-1000128

Source: ProjectDiscovery

References

4