PT-2019-8465 · Mindscape · Raygun4Wp

Publicado 2019-08-20 · Atualizado 2019-08-22 · CVE-2017-18531

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions raygun4wp plugin versions prior to 1.8.3

Description The issue concerns a Cross-Site Scripting (XSS) flaw in the settings of the plugin.

Recommendations For versions prior to 1.8.3, update to version 1.8.3 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-18531

Produtos afetados

Raygun4Wp

Referências · 4

• https://wordpress.org/plugins/raygun4wp/#developers · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18531 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-18531 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-18531 · Aviso do Fabricante