CVE-2018-7433

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

mitre·CWE-532·Published 2018-03-02

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

113 chars

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

NVDen

113 chars

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

NVDes

148 chars

El plugin iThemes Security, en versiones anteriores a la 6.9.1, para WordPress no realiza correctamente el escapado de datos para la página de logs.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	NVD	7.5	3.9	3.6	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N