CVE-2018-20462

An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the jsmol.php data parameter.

• CWE-79

• https://wpvulndb.com/vulnerabilities/9196Exploit, Third Party Advisory
• https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E5%8F%8D%E5%B0%84%E6%80%A7XSSExploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/9196Exploit, Third Party Advisory
• https://www.cbiu.cc/2018/12/WordPress%E6%8F%92%E4%BB%B6jsmol2wp%E6%BC%8F%E6%B4%9E/#%E5%8F%8D%E5%B0%84%E6%80%A7XSSExploit, Third Party Advisory

Published

Dec 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20457In radare2 through 3.1.3, the assemble function inside libr/…5.5
• CVE-2018-20458In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/b…5.5
• CVE-2018-20459In radare2 through 3.1.3, the armass_assemble function in li…5.5
• CVE-2018-2046Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20460In radare2 prior to 3.1.2, the parseOperands function in lib…
• CVE-2018-20461In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_…
• CVE-2018-20463An issue was discovered in the JSmol2WP plugin 1.07 for Word…
• CVE-2018-20464There is a reflected XSS vulnerability in the CMS Made Simpl…
• CVE-2018-20465Craft CMS through 3.0.34 allows remote authenticated adminis…
• CVE-2018-20467In coders/bmp.c in ImageMagick before 7.0.8-16, an input fil…6.5
• CVE-2018-20468An issue was discovered in Tyto Sahi Pro through 7.x.x and 8…
• CVE-2018-20469An issue was discovered in Tyto Sahi Pro through 7.x.x and 8…9.8