Unscored CVE-2018-0603 EUVD-2018-1413GHSA-46rm-6xmg-3mgq

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML …

Published Jun 26, 2018 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: Gemini Labs Product: Site Reviews

Description

Cross-site scripting vulnerability in Site Reviews versions prior to 2.15.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Gemini Labs	Site Reviews	prior to version 2.15.3	—

References

https://wpvulndb.com/vulnerabilities/9102
JVN#60978548 third-party-advisory
https://wordpress.org/plugins/site-reviews/#developers