5 matches found
WordPress API Bearer Auth <20190907 - Cross-Site Scripting
WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. id: CVE-2019-16332 info: name: WordPress API Bearer Auth 20190907 - Cross-Site Scripting author: daffainfo severity: medium...
WordPress API Bearer Auth <20190907 - Cross-Site Scripting Detection
WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting...
CVE-2019-16332
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS...
PT-2019-14631
Name of the Vulnerable Software and Affected Versions api-bearer-auth plugin for WordPress versions prior to 20190907 Description The issue concerns the api-bearer-auth plugin for WordPress, where the server parameter in the swagger-config.yaml.php file is not correctly filtered. This allows for...
CVE-2019-16332: Improper Neutralization of Input During Web Page Generation
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS...