Privilege escalation

2018-12-0316:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

JSON

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:14: via POST request variable classes

CPENameOperatorVersion
arigato_autoresponder_and_newsletterge2.5.0
arigato_autoresponder_and_newsletterlt2.5.1.5

CPE	Name	Operator	Version
	arigato_autoresponder_and_newsletter	ge	2.5.0
	arigato_autoresponder_and_newsletter	lt	2.5.1.5

References

www.vapidlabs.com/advisory.php?v=203

wordpress.org/plugins/bft-autoresponder/

www.exploit-db.com/exploits/45434/