CVE-2018-5316

MEDIUM NUCLEI

SagePay Server Gateway for WooCommerce <1.0.9 - XSS

Title source: llm

CVE-2018-5316 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.

WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting

MEDIUMVERIFIEDby daffainfo

Core 3

Core References

Third Party Advisory, VDB Entry x_refsource_misc

Third Party Advisory x_refsource_misc

Third Party Advisory x_refsource_misc

CVSS v3 6.1

EPSS 0.0376

EPSS Percentile 88.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

patsatech/sagepay_server_gateway_for_woocommerce < 1.0.9

Published Jan 09, 2018

Tracked Since Feb 18, 2026