Lucene search

Custom Body Class Security Vulnerabilities

cve

CVE-2019-6029

Cross-site scripting vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS

6.4AI Score

0.001EPSS

2019-12-26 04:15 PM

cve

CVE-2019-6030

Cross-site request forgery (CSRF) vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

8.8CVSS

8.8AI Score

0.002EPSS

2019-12-26 04:15 PM