Cross-Site Scripting in JSmol2WP Plugin for WordPress
CVE-2018-20462

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Jsmol2WP
Vendor
CVE Published:
25 December 2018

What is CVE-2018-20462?

An issue in the JSmol2WP plugin version 1.07 for WordPress enables remote attackers to exploit a cross-site scripting vulnerability by injecting arbitrary web scripts or HTML via the jsmol.php data parameter. This vulnerability could lead to unauthorized access, compromising the integrity of user data and affecting the overall security of the website.

References

https://wpvulndb.com/vulnerabilities/9196
x_refsource_MISC
https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6js...
x_refsource_MISC

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.