Vulnerability Details CVE-2017-9288
The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.029
EPSS Ranking 85.7%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html
- https://github.com/MindscapeHQ/raygun4wordpress/issues/16
- https://github.com/MindscapeHQ/raygun4wordpress/pull/17
- https://wpvulndb.com/vulnerabilities/8836
- http://jgj212.blogspot.kr/2017/05/a-reflected-xss-vulnerability-in.html
- https://github.com/MindscapeHQ/raygun4wordpress/issues/16
- https://github.com/MindscapeHQ/raygun4wordpress/pull/17
- https://wpvulndb.com/vulnerabilities/8836