Cross-Site Scripting Vulnerability in Fossura Tag Miner Plugin for WordPress
CVE-2016-10979

6.1MEDIUM

Key Information:

Vendor

Wordpress
Status
Tag Miner
Vendor
CVE Published:
17 September 2019

What is CVE-2016-10979?

The Fossura Tag Miner plugin for WordPress, prior to version 1.1.5, is susceptible to a Cross-Site Scripting (XSS) vulnerability. This weakness allows remote attackers to inject arbitrary web script or HTML via crafted input, which can be exploited to execute scripts in the context of the user's browser. Website administrators are urged to update the plugin to the latest version immediately to mitigate the risk associated with this vulnerability.

References

https://wordpress.org/plugins/fossura-tag-miner/#developers
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.