PT-2019-8473 · WordPress · Weblibrarian

Published 2019-08-21 · Updated 2023-02-09 · CVE-2017-18539

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions weblibrarian plugin versions prior to 3.4.8.6 for WordPress

Description The issue concerns a Cross-Site Scripting (XSS) vulnerability. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control. In this case, the vulnerability is exploited via front-end short codes, which are reusable pieces of code used to insert dynamic content into web pages.

Recommendations For versions prior to 3.4.8.6, update to version 3.4.8.6 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-18539

Affected Products

Weblibrarian

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-18539 · Security Note
• https://osv.dev/vulnerability/CVE-2017-18539 · Vendor Advisory
• https://wordpress.org/plugins/weblibrarian/#developers · Note
• https://t.me/cvenotify/43945 · Telegram Post
• https://wpvulndb.com/vulnerabilities/9724 · Note