CVE-2017-1000038
NONE EPSS 60.3%
Published Jul 17, 20178y ago · Modified Jun 17, 20262w ago
Published Jul 17, 2017 8y ago
Last Modified Jun 17, 2026 2w ago
Description
WordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker being able to execute JavaScript on the affected site
Threat Intelligence
EPSS Exploit Probability
60.3% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| relevanssi | relevanssi | 3.5.7.1 | any |
References 1
- security.dxw.com https://security.dxw.com/advisories/stored-xss-in-relevanssi-could-allow-an-unauthenticated-attacker-to-do-almost-anything-an-admin-can-do/
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.