CVE-2018-5316

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter

published January 9, 2018

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03685 · 89.6th percentile
Published
2018-01-09T22:00Z
EPSS history
Timeline
  • 09 JAN 22:00Z
    The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress has XSS via the includes/pages/redirect.php page parameter
    cvelistv5