CVE-2017-12948

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF

published August 18, 2017

CVSS
—
EPSS
1%
Percentile
54.7
In the wild
Unconfirmed
What it is

Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00757 · 54.7th percentile
Published
2017-08-18T18:00Z
EPSS history
Timeline
  • 18 AUG 18:00Z
    Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF
    cvelistv5