Design/Logic Flaw

2019-08-0913:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.9%

JSON

The Tribulant Newsletters plugin before 4.6.19 for WordPress allows XSS via the wp-admin/admin-ajax.php?action=newsletters_load_new_editor contentarea parameter.

CPENameOperatorVersion
newsletterslt4.6.19

CPE	Name	Operator	Version
	newsletters	lt	4.6.19

References

wordpress.org/plugins/newsletters-lite/

wpvulndb.com/vulnerabilities/9447

www.pluginvulnerabilities.com/2019/07/01/reflected-cross-site-scripting-xss-vulnerability-in-newsletters/

0.001 Low

EPSS

Percentile

36.9%

JSON

Related for PRION:CVE-2019-14787