Non évaluée

The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. This is related to an account with the...

CVE-2019-12566 Première détection SecPulse Jun 3, 2019

Description d'origine La description telle que publiée par la source (souvent en anglais).

The WP Statistics plugin through 12.6.5 for Wordpress has stored XSS in includes/class-wp-statistics-pages.php. This is related to an account with the Editor role creating a post with a title that contains JavaScript, to attack an admin user.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory wordpress.org
patch github.com
patch github.com

Faits clés

Gravité: Non évaluée
Publication: Jun 3, 2019
Première détection SecPulse: Jun 3, 2019

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51