PT-2012-6194 · WordPress · Wordpress Integrator
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
WordPress Integrator module version 1.32
Description
A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the
redirect to parameter to "wp-login.php".Recommendations
For WordPress Integrator module version 1.32, avoid using the
redirect to parameter in the "wp-login.php" endpoint until the issue is resolved. Consider temporarily restricting access to the wp-integrator.php file to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wordpress Integrator