PT-2019-13829 · Cp · Cp Contact Form With Paypal

Christian Mondragon + 2 · Publicado 2019-08-15 · Atualizado 2019-08-20 · CVE-2019-14784

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CP Contact Form with PayPal version 1.2.97 and earlier

Description The issue concerns a Cross-Site Scripting (XSS) flaw in the CSS edition of the plugin.

Recommendations For versions 1.2.97 and earlier, update to version 1.2.98 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-14784

Produtos afetados

Cp Contact Form With Paypal

Referências · 3

• https://wordpress.org/plugins/cp-contact-form-with-paypal/#developers · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-14784 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-14784 · Aviso do Fabricante