Cross-Site Scripting Vulnerability in PixelYourSite Plugin for WordPress
CVE-2018-0578

5.4MEDIUM

Key Information:

Vendor

Wordpress
Status
Pixelyoursite
Vendor
CVE Published:
14 May 2018

What is CVE-2018-0578?

The PixelYourSite plugin for WordPress is impacted by a cross-site scripting vulnerability that enables remote attackers to inject arbitrary web scripts or HTML. This security flaw exists in versions prior to 5.3.0 and can be exploited through unspecified vectors, posing a risk to users by potentially executing malicious scripts in the context of the victim's browser.

Affected Version(s)

PixelYourSite prior to version 5.3.0

References

https://wordpress.org/plugins/pixelyoursite/#developers
x_refsource_CONFIRM
http://jvn.jp/en/jp/JVN61081552/index.html
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.