Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-20463

An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an arbitrary file read vulnerability via ../ directory traversal in query=php://filter/resource= in the jsmol.php query string. This can also be used for SSRF.

CVSS 3.0 · 7.5 High EPSS 13.2% KEV · Not listed
Vendors
Jsmol2wp Project
Products
Jsmol2wp
CVE-2018-20462

An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.

CVSS 3.0 · 6.1 Medium EPSS 4.0% KEV · Not listed
Vendors
Jsmol2wp Project
Products
Jsmol2wp