PT-2019-7376 · WordPress · Testimonial Slider

Publicado 2019-09-25 · Atualizado 2019-09-26 · CVE-2015-9417

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions testimonial-slider plugin versions prior to 1.2.2

Description The issue concerns a CSRF vulnerability that results in XSS. This means an attacker can trick a user into performing unintended actions on the website, potentially leading to the execution of malicious scripts.

Recommendations For versions prior to 1.2.2, update to version 1.2.2 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2015-9417

Produtos afetados

Testimonial Slider

Referências · 6

• 🔥 https://wpvulndb.com/vulnerabilities/8170 · Exploit
• https://t.me/cibsecurity/7065 · Publicação no Telegram
• https://t.me/cibsecurity/7028 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2015-9417 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-9417 · Nota
• https://wordpress.org/plugins/testimonial-slider/#developers · Nota