PT-2018-9616
CVE-2018-1002008
·
تاريخ النشر
2018-12-03
·
تاريخ التحديث
2018-12-27
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
WordPress Arigato Autoresponder and News letter version 2.5.1.8
Description:
The issue is related to a reflected XSS vulnerability that requires administrative privileges to exploit. It is located in the list-user.html.php file and can be triggered via a GET request using the
offset variable.Recommendations:
For WordPress Arigato Autoresponder and News letter version 2.5.1.8, consider restricting access to the list-user.html.php file and avoid using the
offset variable in GET requests until a patch is available. As a temporary workaround, restrict administrative privileges to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾