PT-2019-7317 · WordPress · Feedwordpress

Quassy · Publicado 2019-08-28 · Atualizado 2019-09-03 · CVE-2015-9358

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions feedwordpress plugin versions prior to 2015.0514

Description The issue concerns a cross-site scripting (XSS) problem. It is related to the use of add query arg() and remove query arg() functions.

Recommendations For versions prior to 2015.0514, update to version 2015.0514 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2015-9358

Produtos afetados

Feedwordpress

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9358 · Nota
• https://t.me/cibsecurity/6514 · Publicação no Telegram
• https://wordpress.org/plugins/feedwordpress/#developers · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-9358 · Nota de Segurança