CVE-2017-2169 MaxButtons <= 6.18 - Cross-Site Scripting
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxbuttons project maxbuttons | <= 6.18 | No fix listed |
| Max Foundry MaxButtons | = prior to version 6.19 | No fix listed |
| Max Foundry MaxButtons Pro | = prior to version 6.19 | No fix listed |
| wordpress maxbuttons(WordPress) | < 6.19 | 6.19 |
References
- JVNDB-2017-000093 third-party-advisory vdb-entry
- JVN#70411623 third-party-advisory vdb-entry
- wordpress.org release-notes vendor-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org