PT-2018-15098
CVE-2018-19796
·
تاريخ النشر
2018-12-03
·
تاريخ التحديث
2020-03-03
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Ninja Forms plugin versions prior to 3.3.19.1
Description
The issue is related to an open redirect that allows remote attackers to redirect a user. This is achieved via the "lib/StepProcessing/step-processing.php" submissions download page, specifically through a redirect parameter.
Recommendations
For versions prior to 3.3.19.1, update to version 3.3.19.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾