exploitDog

CVE-2019-17233

Опубликовано: 07 окт. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.

Ссылки

https://blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/
Exploit
Third Party Advisory
https://wordpress.org/plugins/ultimate-faqs/#developers
Product
Release Notes
https://wpvulndb.com/vulnerabilities/9883
Third Party Advisory
https://blog.nintechnet.com/unauthenticated-options-import-vulnerability-in-wordpress-ultimate-faq-plugin/
Exploit
Third Party Advisory
https://wordpress.org/plugins/ultimate-faqs/#developers
Product
Release Notes
https://wpvulndb.com/vulnerabilities/9883
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:etoilewebdesign:ultimate_faq:*:*:*:*:*:wordpress:*:*

Версия до 1.8.24 (включая)

EPSS

Процентиль: 85%

0.02533

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-5r74-p252-mh8w

github

больше 3 лет назад

Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.

EPSS

Процентиль: 85%

0.02533

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79