core/lib/upload/um-image-upload.php in the UltimateMember plugin 2.0 for WordPress has a cross-site scripting vulnerability because it fails to properly sanitize user input passed to the $temp variable.
References
Link | Resource |
---|---|
https://packetstormsecurity.com/files/146403/WordPress-UltimateMember-2.0-Cross-Site-Scripting.html | Exploit Third Party Advisory VDB Entry |
https://wpvulndb.com/vulnerabilities/9705 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-02-16T14:00:00
Updated: 2019-08-28T04:06:08
Reserved: 2018-02-12T00:00:00
Link: CVE-2018-6943
JSON object: View
NVD Information
Status : Modified
Published: 2018-02-16T14:29:00.537
Modified: 2019-08-28T05:15:10.380
Link: CVE-2018-6943
JSON object: View
Redhat Information
No data.
CWE