Lucene search
MitreCVELIST:CVE-2019-16524HistorySep 26, 2019 - 3:45 p.m.
CVE-2019-16524
2019-09-2615:45:33
mitre
www.cve.org
2
EPSS
0.001
Percentile
36.1%
The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter.
Related
openvas
openvas
WordPress Easy FancyBox < 1.8.18 Stored XSS Vulnerability
2019-09-30 00:00:00
cve
cve
CVE-2019-16524
2019-09-26 16:15:11
wpvulndb
wpvulndb
Easy Fancybox < 1.8.18 - Authenticated Stored XSS
2019-09-25 00:00:00
prion
prion
Cross site scripting
2019-09-26 16:15:00
nvd
nvd
CVE-2019-16524
2019-09-26 16:15:11