← Back

Magic Fields

magic_fields

Vendor: Magicfields • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-18611
1Magicfields
1Magic Fields
Nov 21, 2024
Sep 10, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.
CVE-2017-18610
1Magicfields
1Magic Fields
Nov 21, 2024
Sep 10, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
CVE-2017-18609
1Magicfields
1Magic Fields
Nov 21, 2024
Sep 10, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.