CVE-2018-16173: XSS
Published Jan 9, 2019
·Updated
Cross-site scripting vulnerability in LearnPress prior to version 3.1.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected Software
1 affected component
thimpress Learnpress Wordpress<3.1.0
Event History
Jan 9, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this cross-site scripting vulnerability?
The vulnerability ID for this cross-site scripting vulnerability is CVE-2018-16173.
2
What is the affected software for this vulnerability?
The affected software for this vulnerability is Thimpress Learnpress prior to version 3.1.0.
3
What is the severity of CVE-2018-16173?
The severity of CVE-2018-16173 is medium with a CVSS score of 6.1.
4
How can remote attackers exploit this vulnerability?
Remote attackers can exploit this vulnerability by injecting arbitrary web script or HTML via unspecified vectors.
5
Is there a fix available for this vulnerability?
Yes, a fix for this vulnerability is available in version 3.1.0 of Thimpress Learnpress.