PT-2017-7402
CVE-2015-8353
·
تاريخ النشر
2017-09-11
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Role Scoper plugin for WordPress versions prior to 1.3.67
Description
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the
object name parameter in a "rs-object role edit" page to "wp-admin/admin.php".Recommendations
For versions prior to 1.3.67, update to version 1.3.67 or later to resolve the issue. As a temporary workaround, consider restricting access to the "rs-object role edit" page in "wp-admin/admin.php" to minimize the risk of exploitation. Avoid using the
object name parameter in the affected page until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾