PT-2019-16101 · WordPress · Laborator Neon
CVE-2019-20141
·
Published
2019-12-30
·
Updated
2023-01-20
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Laborator Neon theme version 2.0
Description
A cross-site scripting (XSS) issue was found in the Laborator Neon theme for WordPress. The issue is related to the
q parameter in the "data/autosuggest-remote.php" endpoint.Recommendations
For Laborator Neon theme version 2.0, avoid using the
q parameter in the "data/autosuggest-remote.php" endpoint until a fix is available. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Laborator Neon