medium5.4Public exploit code
CVE-2018-10310
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- UK Cookie Consent - Persistent Cross-Site Scripting2018-04-24 · webapps · php
Impact
A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Catapultthemes | Cookie Consent | before 2.3.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/147333/WordPress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.html
- https://gist.github.com/B0UG/9732614abccaf2893c352d14c822d07b
- https://wordpress.org/plugins/uk-cookie-consent/#developers
- https://www.exploit-db.com/exploits/44503/
- http://packetstormsecurity.com/files/147333/WordPress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.html
- https://gist.github.com/B0UG/9732614abccaf2893c352d14c822d07b
- https://wordpress.org/plugins/uk-cookie-consent/#developers
- https://www.exploit-db.com/exploits/44503/