CVE-2018-10310

EPSS 3.9%

A persistent cross-site scripting vulnerability has been identified in the web interface of the Catapult UK Cookie Consent plugin before 2.3.10 for WordPress that allows the execution of arbitrary HTML/script code in the context of a victim's browser.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.com/files/147333/WordPress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.htmlunverified cve_referencewww.exploit-db.com/exploits/44503/unverified exploitdbwww.exploit-db.com/exploits/44503unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/147333/WordPress-UK-Cookie-Consent-2.3.9-Cross-Site-Scripting.html https://gist.github.com/B0UG/9732614abccaf2893c352d14c822d07b https://wordpress.org/plugins/uk-cookie-consent/#developers https://www.exploit-db.com/exploits/44503/