PT-2019-7386
CVE-2015-9427
·
تاريخ النشر
2019-09-26
·
تاريخ التحديث
2019-09-26
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
googmonify plugin versions through 0.5.1 for WordPress
Description
The issue concerns a CSRF with resultant XSS. It is exploitable via the
wp-admin/options-general.php?page=googmonify.php endpoint, specifically through the PID or AID parameters.Recommendations
For versions through 0.5.1, consider disabling access to the
wp-admin/options-general.php?page=googmonify.php endpoint until a patch is available. Restrict the use of the PID and AID parameters in this endpoint to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾