CVE-2019-16332

Name of the Vulnerable Software and Affected Versions api-bearer-auth plugin for WordPress versions prior to 20190907

Description The issue concerns the api-bearer-auth plugin for WordPress, where the server parameter in the swagger-config.yaml.php file is not correctly filtered. This allows for the injection of JavaScript code, leading to a potential XSS issue.

Recommendations For versions prior to 20190907, update the api-bearer-auth plugin to a version released after 20190907 to resolve the issue. As a temporary workaround, consider restricting access to the swagger-config.yaml.php file to minimize the risk of exploitation.