gist.github.com
https://gist.github.com/B0UG/f0cfb356e23be3cd6ebea69566d6100a CVE-2018-10309
MEDIUM
WordPress Plugin Responsive Cookie Consent 1.7 / 1.6 / 1.5 - (Authenticated) Persistent Cross-Site Scripting
Record summary
CVE-2018-10309 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Responsive Cookie Consent 1.7 / 1.6 / 1.5 - (Authenticated) Persistent Cross-Site ScriptingExploitDB exploitby B0UGNot analyzed1 file
References
5nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2018-10309 wordpress.orgConfirmation
https://wordpress.org/plugins/responsive-cookie-consent wpvulndb.com
https://wpvulndb.com/vulnerabilities/9067 44563exploit
https://www.exploit-db.com/exploits/44563