CVE-2020-19156

Cross Site Scripting XSS in Ari Adminer v1 allows remote attackers to execute arbitrary code via the 'Title' parameter of the 'Add New Connections' component when the 'save' function is called...

CVE-2020-19156

CVE-2020-19156 affects Ari Adminer v1 (WordPress plugin). An XSS flaw in the Add New Connections -> save() path via the Title parameter allows remote input handling that could lead to code execution. Root cause: insufficient input sanitization in the vulnerable component. Impact stated as XSS ...