CVE-2019-15317

CVE-2019-15317

EPSS 1.2%

The give plugin before 2.4.7 for WordPress has XSS via a donor name.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://blog.sucuri.net/2019/05/wordpress-plugin-give-stored-xss-for-donors.html https://wordpress.org/plugins/give/#developers https://wpvulndb.com/vulnerabilities/9584