Home

Description

The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.

PUBLISHED Reserved 2019-09-13 | Published 2019-09-13 | Updated 2024-08-05 | Assigner mitre

References

wordpress.org/plugins/insert-php/

generaleg0x01.com/2019/09/13/xss-woody/

wpvulndb.com/vulnerabilities/9880

wordpress.org/plugins/insert-php/

generaleg0x01.com/2019/09/13/xss-woody/

wpvulndb.com/vulnerabilities/9880

cve.org (CVE-2019-16289)

nvd.nist.gov (CVE-2019-16289)

Download JSON