Lucene search
Akash LabadeWPEX-ID:19DF4F3E-BBE4-4260-9218-F8FD161220C7HistoryJun 26, 2019 - 12:00 a.m.
WebP Express <= 0.14.4 - Authenticated Stored XSS
2019-06-2600:00:00
Akash Labade
13
EPSS
0.001
Percentile
24.8%
Edit - WPScanTeam: The reported issue has been fixed in 0.14.5. Other sanitisation checks have been implemented in newest versions (such as 0.14.6 and 0.14.8) while the plugin was closed, so the fixed in is set to 0.14.8
Video POC : https://drive.google.com/file/d/1TtiTruCEGGg3U7LDC10gacvNfbGku6Gi/view?usp=sharingRelated
cve
cve
CVE-2019-15837
2019-08-30 17:15:12
openvas
openvas
WordPress WebP Express Plugin < 0.14.8 XSS Vulnerability
2019-09-11 00:00:00
wpvulndb
wpvulndb
WebP Express <= 0.14.4 - Authenticated Stored XSS
2019-06-26 00:00:00
prion
prion
Cross site scripting
2019-08-30 17:15:00
cvelist
cvelist
CVE-2019-15837
2019-08-30 16:10:56
nvd
nvd
CVE-2019-15837
2019-08-30 17:15:12