PT-2019-18068

CVE-2019-6278

·

Published

2019-01-14

·

Updated

2019-01-18

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions JPress version 1.0.4
Description The issue exists due to XSS in Markdown input, which can also be triggered when using the code input option.
Recommendations For JPress version 1.0.4, consider disabling Markdown input or restricting the use of the code input option as a temporary workaround until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2019-6278
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com