WordPress WP DSGVO Tools Plugin < 2.2.19 XSS Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...

CVE-2019-15777

CVE-2019-15777 affects the WordPress plugin shapepress-dsgvo (WP DSGVO Tools) prior to version 2.2.19. The vulnerability is an XSS in wp-admin/admin-ajax.php?action=admin-common-settings&admin_email=, caused by insufficient input validation. Impact is client-side code execution. Some sources desc...