CVE-2019-12934

2019-07-2000:15:11

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.2%

JSON

An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter.

CPENameOperatorVersion
wp-code-highlight.jseq0.6.2
wp-code-highlight.jseq0.1.0
wp-code-highlight.jseq0.5.17
wp-code-highlight.jseq0.1.2
wp-code-highlight.jseq0.3.7
wp-code-highlight.jseq0.4.3
wp-code-highlight.jseq0.1.1
wp-code-highlight.jseq0.5.0
wp-code-highlight.jseq0.5.11
wp-code-highlight.jseq0.5.9

Name	Operator	Version
wp-code-highlight.js	eq	0.6.2
wp-code-highlight.js	eq	0.1.0
wp-code-highlight.js	eq	0.5.17
wp-code-highlight.js	eq	0.1.2
wp-code-highlight.js	eq	0.3.7
wp-code-highlight.js	eq	0.4.3
wp-code-highlight.js	eq	0.1.1
wp-code-highlight.js	eq	0.5.0
wp-code-highlight.js	eq	0.5.11
wp-code-highlight.js	eq	0.5.9