CVE-2019-14470

EPSS 83.0%

cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/154206/WordPress-UserPro-4.9.32-Cross-Site-Scripting.htmlunverified cve_referencewww.exploit-db.com/exploits/47304unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/154206/WordPress-UserPro-4.9.32-Cross-Site-Scripting.html https://github.com/cosenary/Instagram-PHP-API/commits/master https://wpvulndb.com/vulnerabilities/9815 https://www.exploit-db.com/exploits/47304