Vulnerabilities

TI-2017-13784 CVE-2017-18611 · GHSA-792c-fhxf-x9jx

The magic-fields plugin before 1.7.2 for WordPress has XSS via the…

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79

TI-2017-13783 CVE-2017-18610 · GHSA-49xh-hg4f-jcq3

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79

TI-2017-13782 CVE-2017-18609 · GHSA-v2xv-px5j-7x7v

LOW 30

The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01159 Published 2019-09-10 No fix listed CWE-79