WordPress PropertyHive plugin <=1.4.14 - Cross-Site Scripting (XSS) vulnerability

2018-02-0500:00:00

N/A

patchstack.com

0.001 Low

EPSS

Percentile

51.2%

JSON

Cross-Site Scripting (XSS) vulnerability found in WordPress PropertyHive plugin (versions <=1.4.14). Cross-Site Scripting possible via the body parameter “includes/admin/views/html-preview-applicant-matches-email.php”.

Solution

           Update the WordPress PropertyHive plugin to the latest available version (at least 1.4.15).

CPENameOperatorVersion
propertyhivele1.4.14

CPE	Name	Operator	Version
	propertyhive	le	1.4.14

References

wordpress.org/plugins/propertyhive/#developers

0.001 Low

EPSS

Percentile

51.2%

JSON

Related for PATCHSTACK:4D56AD01C678C465917ABEEBA7C45E07