CVEDB API

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 52.3%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2017-18611

Magicfields » Magic Fields » Version: N/A

cpe:2.3:a:magicfields:magic_fields:-
Magicfields » Magic Fields » Version: 1.0

cpe:2.3:a:magicfields:magic_fields:1.0
Magicfields » Magic Fields » Version: 1.1

cpe:2.3:a:magicfields:magic_fields:1.1
Magicfields » Magic Fields » Version: 1.2

cpe:2.3:a:magicfields:magic_fields:1.2
Magicfields » Magic Fields » Version: 1.2.1

cpe:2.3:a:magicfields:magic_fields:1.2.1
Magicfields » Magic Fields » Version: 1.3

cpe:2.3:a:magicfields:magic_fields:1.3
Magicfields » Magic Fields » Version: 1.3.2

cpe:2.3:a:magicfields:magic_fields:1.3.2
Magicfields » Magic Fields » Version: 1.4

cpe:2.3:a:magicfields:magic_fields:1.4
Magicfields » Magic Fields » Version: 1.4.1

cpe:2.3:a:magicfields:magic_fields:1.4.1
Magicfields » Magic Fields » Version: 1.4.5

cpe:2.3:a:magicfields:magic_fields:1.4.5
Magicfields » Magic Fields » Version: 1.5

cpe:2.3:a:magicfields:magic_fields:1.5
Magicfields » Magic Fields » Version: 1.5.1

cpe:2.3:a:magicfields:magic_fields:1.5.1
Magicfields » Magic Fields » Version: 1.5.2

cpe:2.3:a:magicfields:magic_fields:1.5.2
Magicfields » Magic Fields » Version: 1.5.5

cpe:2.3:a:magicfields:magic_fields:1.5.5
Magicfields » Magic Fields » Version: 1.7

cpe:2.3:a:magicfields:magic_fields:1.7
Magicfields » Magic Fields » Version: 1.7.1

cpe:2.3:a:magicfields:magic_fields:1.7.1