gd_rating_system_project - MidnightBSD Security Advisories

CVE-2018-5286 MEDIUM

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-about page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5287 MEDIUM

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-about page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5288 MEDIUM

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5289 MEDIUM

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-information page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5290 MEDIUM

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5291 MEDIUM

The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tools page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5292 MEDIUM

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

CVE-2018-5293 MEDIUM

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
gd_rating_system_project	gd_rating_system	2.3

Advisories for gd_rating_system_project