2018-04-06

2018-04-07

2018-04-08

All (2) Critical (3) High (5) Medium (2)

CVE-2018-9844 Apr 07, 07:29 MEDIUM POC This Month

The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS File Upload Wordpress File Upload Wordpress Plugin +1

NVD Exploit-DB

CVSS 3.0

6.1

EPSS

3.8%

CVE-2018-9330 Apr 07, 17:29 MEDIUM POC This Month

register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a different vulnerability than CVE-2015-6942. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Coremail Xt Coremail

NVD

CVSS 3.0

5.4

EPSS

0.5%