medium5.4Public exploit code
CVE-2018-10309
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
Impact
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Responsive Cookie Consent Project | Responsive Cookie Consent | before 1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/B0UG/f0cfb356e23be3cd6ebea69566d6100a
- https://wordpress.org/plugins/responsive-cookie-consent/#developers
- https://wpvulndb.com/vulnerabilities/9067
- https://www.exploit-db.com/exploits/44563/
- https://gist.github.com/B0UG/f0cfb356e23be3cd6ebea69566d6100a
- https://wordpress.org/plugins/responsive-cookie-consent/#developers
- https://wpvulndb.com/vulnerabilities/9067
- https://www.exploit-db.com/exploits/44563/