2 matches found
CVE-2019-9978: Improper Neutralization of Input During Web Page Generation
The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swpdebug=loadoptions swpurl parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro...
6.1CVSS6.6AI score0.72946EPSS
SaveExploits20References2
VulnCheck KEV: CVE-2019-9978
WordPress Social Warfare plugin contains a cross-site scripting XSS vulnerability that allows for remote code execution. This vulnerability affects Social Warfare and Social Warfare Pro...
6.1CVSS7.5AI score0.72946EPSS
SaveIn wildExploits20References622
20