PT-2018-9615
CVE-2018-1002007
·
تاريخ النشر
2018-12-03
·
تاريخ التحديث
2018-12-27
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
WordPress Arigato Autoresponder and News letter version 2.5.1.8
Description:
The issue is related to a reflected XSS vulnerability that requires administrative privileges to exploit. It is located in the integration-contact-form.html.php file at line 15 and can be triggered via a POST request using the
html id variable.Recommendations:
For WordPress Arigato Autoresponder and News letter version 2.5.1.8, consider restricting access to the integration-contact-form.html.php file until a patch is available, and avoid using the
html id variable in POST requests to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾