PT-2019-13841 · Woocommerce · Mq-Woocommerce-Products-Price-Bulk-Edit

CVE-2019-14796

·

Publicado

2019-08-09

·

Atualizado

2023-03-03

CVSS v3.1

5.4

Média

VetorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions mq-woocommerce-products-price-bulk-edit plugin version 2.0
Description The issue allows for XSS via the "wp-admin/admin-ajax.php?action=update options" API endpoint, specifically through the show products page limit parameter.
Recommendations For mq-woocommerce-products-price-bulk-edit plugin version 2.0, avoid using the show products page limit parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-14796

Produtos afetados

Mq-Woocommerce-Products-Price-Bulk-Edit