Lucene search
MitreCVELIST:CVE-2019-16332HistorySep 15, 2019 - 9:00 p.m.
CVE-2019-16332
2019-09-1521:00:40
mitre
www.cve.org
1
0.003 Low
EPSS
Percentile
69.8%
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.
Related
nvd
nvd
CVE-2019-16332
2019-09-15 22:15:10
wpvulndb
wpvulndb
API Bearer Auth <= 20181229 - Unauthenticated Reflected XSS
2019-09-05 00:00:00
wpexploit
wpexploit
API Bearer Auth <= 20181229 - Unauthenticated Reflected XSS
2019-09-05 00:00:00
cve
cve
CVE-2019-16332
2019-09-15 22:15:10
prion
prion
Cross site scripting
2019-09-15 22:15:00
nuclei
nuclei
WordPress API Bearer Auth <20190907 - Cross-Site Scripting
2021-07-15 17:06:33