CVE-2017-1000038: XSS
Published Jul 13, 2017
·Updated
WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site
Affected Software
1 affected component
Relevanssi Relevanssi WordPress=3.5.7.1
Event History
Jul 13, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-1000038?
CVE-2017-1000038 has a medium severity rating due to its potential for stored XSS attacks.
2
How do I fix CVE-2017-1000038?
To fix CVE-2017-1000038, update the Relevanssi plugin to a version newer than 3.5.7.1.
3
What type of vulnerability is CVE-2017-1000038?
CVE-2017-1000038 is classified as a stored cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2017-1000038?
Users of the Relevanssi plugin version 3.5.7.1 for WordPress are affected by CVE-2017-1000038.
5
What can an attacker do with CVE-2017-1000038?
An attacker exploiting CVE-2017-1000038 can execute malicious JavaScript on the affected site.