Vulnerability Details CVE-2017-14126
The Participants Database plugin before 1.7.5.10 for WordPress has XSS.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.024
EPSS Ranking 84.4%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html
- https://wordpress.org/plugins/participants-database/#developers
- https://www.exploit-db.com/exploits/42618/
- https://limbenjamin.com/articles/cve-2017-14126-participants-database-xss.html
- https://wordpress.org/plugins/participants-database/#developers
- https://www.exploit-db.com/exploits/42618/
Products affected by CVE-2017-14126
-
cpe:2.3:a:xnau:participants_database:1.7.5.10