Security Advisory

CVE-2018-11709

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-04 13:00:00

Last updated 2024-09-16 17:28:22

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

← Browse all CVEs View on cve.org ↗