CVE-2018-14846 Multi Step Form <= 1.2.5 - Stored Cross-Site Scripting
MediumCVSS 5.4
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Mondula Multi Step Form plugin before 1.2.8 for WordPress has multiple stored XSS via wp-admin/admin-ajax.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Mondula GmbH Multi Step Form | < 1.2.8 | 1.2.8 |
| wordpress multi-step-form(WordPress) | < 1.2.6 | 1.2.6 |
References
- ansawaf.blogspot.com exploit third-party-advisory
- cwatch.comodo.com exploit patch third-party-advisory
- wpvulndb.com exploit patch third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org