CVE-2018-5369: XSS

Published Jan 12, 2018

Updated

The SrbTransLatin plugin 1.46 for WordPress has XSS via an srbtranslatoptions action to wp-admin/options-general.php with a langidentificator parameter.

Affected Software

1 affected component

Srbtranslatin Project Srbtranslatin Wordpress=1.46

Event History

Jan 12, 2018

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

Description

Data Sourced

via NVD·09:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-5369?

CVE-2018-5369 is a vulnerability in the SrbTransLatin plugin 1.46 for WordPress that allows for cross-site scripting (XSS) attacks.

How does CVE-2018-5369 work?

CVE-2018-5369 works by exploiting the srbtranslatoptions action in wp-admin/options-general.php with a lang_identificator parameter.

What is the severity of CVE-2018-5369?

CVE-2018-5369 has a severity rating of medium, with a CVSS score of 4.8.

How can I fix CVE-2018-5369?

To fix CVE-2018-5369, update the SrbTransLatin plugin to version 1.47 or later.

Where can I find more information about CVE-2018-5369?

You can find more information about CVE-2018-5369 at the following references: [GitHub](https://github.com/d4wner/Vulnerabilities-Report/blob/master/SrbTransLatin.md), [WPScan](https://wpvulndb.com/vulnerabilities/9004).