← back
CVE-2018-6465

CVE-2018-6465

EPSS 1.7%
The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://packetstormsecurity.com/files/146174/WordPress-Propertyhive-1.4.14-Cross-Site-Scripting.htmlhttps://wordpress.org/plugins/propertyhive/#developershttps://wordpress.org/support/topic/wordpress-propertyhive-1-4-14-cross-site-scripting/https://wpvulndb.com/vulnerabilities/9020