PT-2019-5218 · WordPress · Wordpress

CVE-2019-17672

·

Publicado

2019-09-11

·

Atualizado

2023-02-04

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.2.4
Description The issue is related to a stored XSS attack that allows an attacker to inject JavaScript into STYLE elements. This can potentially impact the integrity of the data. The exploitation of this issue may allow a remote attacker to affect data integrity.
Recommendations For versions prior to 5.2.4, update to version 5.2.4 or later to resolve the issue. As a temporary workaround, consider restricting access to STYLE elements to minimize the risk of exploitation.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2020-01947
CVE-2019-17672
DSA-4599-1
DSA-4677-1

Produtos afetados

Wordpress