medium6.1Public exploit code
CVE-2018-10371
An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin WF Cookie Consent 1.1.3 - Cross-Site Scripting2018-05-04 · webapps · php
Impact
An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripting vulnerability has been identified in the web interface of the plugin that allows the execution of arbitrary HTML/script code to be executed in a victim's web browser via a page title.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wunderfarm | Wf Cookie Consent | Version 1.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/B0UG/8615df3fe83a4deca07334af783696d6
- https://wordpress.org/plugins/wf-cookie-consent/#developers
- https://wpvulndb.com/vulnerabilities/9080
- https://www.exploit-db.com/exploits/44585/
- https://gist.github.com/B0UG/8615df3fe83a4deca07334af783696d6
- https://wordpress.org/plugins/wf-cookie-consent/#developers
- https://wpvulndb.com/vulnerabilities/9080
- https://www.exploit-db.com/exploits/44585/