PT-2019-14631
CVE-2019-16332
·
تاريخ النشر
2019-09-15
·
تاريخ التحديث
2019-10-08
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
api-bearer-auth plugin for WordPress versions prior to 20190907
Description
The issue concerns the api-bearer-auth plugin for WordPress, where the server parameter in the swagger-config.yaml.php file is not correctly filtered. This allows for the injection of JavaScript code, leading to a potential XSS issue.
Recommendations
For versions prior to 20190907, update the api-bearer-auth plugin to a version released after 20190907 to resolve the issue. As a temporary workaround, consider restricting access to the swagger-config.yaml.php file to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾