CVE-2018-11709

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site…

published June 4, 2018

CVSS
—
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site Scripting (XSS) via the URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03545 · 89.2th percentile
Published
2018-06-04T13:00Z
EPSS history
Timeline
  • 04 JUN 13:00Z
    wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin before 1.4.12 for WordPress allows Unauthenticated Reflected Cross-Site…
    cvelistv5