Design/Logic Flaw

2019-09-1715:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

The leenkme plugin before 2.6.0 for WordPress has stored XSS via facebook_message, facebook_linkname, facebook_caption, facebook_description, default_image, or _wp_http_referer.

CPENameOperatorVersion
leenk.melt2.6.0

CPE	Name	Operator	Version
	leenk.me	lt	2.6.0

References

wordpress.org/plugins/leenkme/

wpvulndb.com/vulnerabilities/8457

www.openwall.com/lists/oss-security/2016/04/16/4