CVE-2018-7433 iThemes Security <= 6.9.0 - Cross-Site Scripting
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ithemes security | <= 6.9.0 | No fix listed |
| wordpress better-wp-security(WordPress) | < 6.9.1 | 6.9.1 |
References
- wordpress.org third-party-advisory
- Wordfence Intelligence third-party-advisory
- www.cve.org