CVE-2016-10973

CVE-2016-10973

Published · Updated

18Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 1.7%
exploitation probability
1.7%top 23% of all CVEs
observed exploitation
nono source reports it
The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php?page=BraftonArticleLoader tab parameter to BraftonAdminPage.php.
Affected products
n/a · n/a