CVE-2018-18069
Public Exploits 1
Nuclei · 1 CVE-2018-18069.yaml [template]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-18069
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3 for WordPress has XSS via any locale_file_name_ parameter (such as locale_file_name_en) in an authenticated theme-localization.php request to wp-admin/admin.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress WPML插件跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。WPML（又名sitepress-multilingual-cms）是使用在其中的一个多语言支持插件。 WordPress WPML插件3.6.3及之前版本中的‘process_forms’函数存在跨站脚本漏洞，该漏洞源于程序未过滤‘locale_file_name_’参数，例如‘locale_file_name_en’参数。远程攻击者可通过向wp-admin/ad
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-18069
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | WordPress plugin sitepress-multilingual-cms 3.6.3 is vulnerable to cross-site scripting in process_forms via any locale_file_name_ parameter (such as locale_file_name_en) in an authenticated theme-localization.php request to wp-admin/admin.php. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18069.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-18069
请登录查看更多情报信息。
Same Patch Batch · n/a · 2018-10-08 · 26 CVEs total
| CVE-2018-16293 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-1000807 | Python Cryptographic Authority pyopenssl 安全漏洞 | |
| CVE-2018-1000810 | Rust Programming Language Standard Library 缓冲区错误漏洞 | |
| CVE-2018-1000809 | privacyIDEA token validation api 输入验证漏洞 | |
| CVE-2018-1000808 | Python Cryptographic Authority pyopenssl 安全漏洞 | |
| CVE-2018-1000805 | Paramiko SSH server 访问控制错误漏洞 | |
| CVE-2018-1000804 | Contiki-NG AQL数据库引擎缓冲区错误漏洞 | |
| CVE-2018-1000803 | Gitea 信息泄露漏洞 | |
| CVE-2018-17060 | Telerik Extensions for ASP.NET MVC 路径遍历漏洞 | |
| CVE-2018-16297 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-16296 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-16295 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-16294 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-18064 | cairo 安全漏洞 | |
| CVE-2018-16292 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-16291 | Foxit Reader和Foxit PhantomPDF JavaScript引擎安全漏洞 | |
| CVE-2018-17440 | D-Link Central WiFi Manager 安全漏洞 | |
| CVE-2018-17441 | D-Link Central WiFi Manager 跨站脚本漏洞 | |
| CVE-2018-17442 | D-Link Central WiFi Manager 安全漏洞 | |
| CVE-2018-17443 | D-Link Central WiFi Manager 跨站脚本漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-18069
No comments yet