CVE-2017-18540: XSS
First published: Wed Aug 21 2019(Updated: )
The weblibrarian plugin before 3.4.8.7 for WordPress has XSS via front-end short codes.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Deepsoft Weblibrarian | <3.4.8.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the weblibrarian plugin before version 3.4.8.7?
The vulnerability ID for the weblibrarian plugin before version 3.4.8.7 is CVE-2017-18540.
What is the severity of CVE-2017-18540?
The severity of CVE-2017-18540 is medium with a severity value of 6.1.
How does the weblibrarian plugin before version 3.4.8.7 have XSS vulnerability?
The weblibrarian plugin before version 3.4.8.7 has XSS vulnerability via front-end short codes.
How can I fix the XSS vulnerability in the weblibrarian plugin?
To fix the XSS vulnerability in the weblibrarian plugin, update to version 3.4.8.7 or later.
Where can I find more information about the weblibrarian plugin and this vulnerability?
You can find more information about the weblibrarian plugin and this vulnerability at the following links: [WordPress Plugin Page](https://wordpress.org/plugins/weblibrarian/#developers), [WPScan Vulnerability Database](https://wpvulndb.com/vulnerabilities/9725).
- collector/nvd-index
- vendor/deepsoft
- canonical/deepsoft weblibrarian