CVE-2018-6194

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the search parameter to wp-admin/upload.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:splashing_images_project:splashing_images:*:*:*:*:*:wordpress:*:*

History

No history.

Information

Published : 2018-01-30 20:29

Updated : 2024-02-28 16:25


NVD link : CVE-2018-6194

Mitre link : CVE-2018-6194

CVE.ORG link : CVE-2018-6194


JSON object : View

Products Affected

splashing_images_project

  • splashing_images
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')