Lucene search
WpvulndbWPEX-ID:405709DA-8EB7-4525-9F1E-850E4D291BABHistoryMay 04, 2020 - 12:00 a.m.
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter
2020-05-0400:00:00
wpvulndb
19
EPSS
0.001
Percentile
37.3%
The plugin did not escape, validate or escape the ‘langid’ GET parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in admin
https://example.com/wp-admin/admin.php?page=wpforo-phrases&ids&action=-1&langid="><script>alert(/XSS/)</script>&phrase_package=0&paged=1&action2=-1Related
prion
prion
Design/Logic Flaw
2020-06-15 14:15:00
cvelist
cvelist
CVE-2019-19111
2020-06-15 13:10:49
nvd
nvd
CVE-2019-19111
2020-06-15 14:15:09
cve
cve
CVE-2019-19111
2020-06-15 14:15:09
wpvulndb
wpvulndb
wpForo < 1.7.0 - Reflected Cross-Site Scripting (XSS) via langid Parameter
2020-05-04 00:00:00