CVE-2018-1002007: XSS
First published: Mon Dec 03 2018(Updated: )
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable html_id.
Credit: larry0@me.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Kibokolabs Arigato Autoresponder And Newsletter | =2.5.1.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this WordPress Arigato Autoresponder and News letter vulnerability?
The vulnerability ID for this WordPress Arigato Autoresponder and News letter vulnerability is CVE-2018-1002007.
What is the severity of CVE-2018-1002007?
The severity of CVE-2018-1002007 is medium with a score of 4.8.
What is the affected software for CVE-2018-1002007?
The affected software for CVE-2018-1002007 is Kibokolabs Arigato Autoresponder And Newsletter version 2.5.1.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by sending a POST request with a malicious html_id parameter.
Are there any known fixes or patches for CVE-2018-1002007?
There are no known fixes or patches for CVE-2018-1002007. It is recommended to update to a patched version if available or consider alternative plugins.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/event
- agent/description
- agent/tags
- agent/first-publish-date
- vendor/kibokolabs
- canonical/kibokolabs arigato autoresponder and newsletter
- version/kibokolabs arigato autoresponder and newsletter/2.5.1.8