cleantalk
Vulnerabilities and Security Researches

PropertyHive, CVE-2018-6465

CVE, Research URL

CVE-2018-6465

Application

PropertyHive

Published on
Jan 31, 2018
Research Description
The PropertyHive plugin before 1.4.15 for WordPress has XSS via the body parameter to includes/admin/views/html-preview-applicant-matches-email.php.
Affected versions
Min -, max 1.4.26.
Status
vulnerable