CVE-2018-1000512
Summary
| CVE | CVE-2018-1000512 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-06-26 16:29:00 UTC |
| Updated | 2018-08-20 15:48:00 UTC |
| Description | Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode that can result in could allow anybody to do almost anything an admin can. This attack appear to be exploitable via Admin must follow a link. This vulnerability appears to have been fixed in 5.1. |
Risk And Classification
Problem Types: CWE-79
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Tooltipy Project | Tooltipy | 5.0 | All | All | All |
| Application | Tooltipy Project | Tooltipy | 5.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Reflected XSS in Tooltipy (tooltips for WP) could allow anybody to do almost anything an admin can – dxw advisories | MISC | advisories.dxw.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.