CVE-2018-9034

NONE EPSS 78.4%

Published Apr 4, 20188y ago · Modified Jun 17, 20262w ago

Published Apr 4, 2018 8y ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remote attackers to inject arbitrary JavaScript or HTML via the tab GET parameter.

Threat Intelligence

EPSS Exploit Probability

78.4% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
relevanssi	relevanssi	*	≤4.0.4

References 1

exploit-db.com https://www.exploit-db.com/exploits/44366/

ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.