Stored XSS in WebARX Plugin for WordPress by WebARX
CVE-2019-17213
6.1MEDIUM
What is CVE-2019-17213?
The WebARX Plugin version 1.3.0 for WordPress contains a stored cross-site scripting (XSS) vulnerability that allows an attacker to inject malicious scripts. This could occur via the Uniform Resource Identifier (URI) or through the X-Forwarded-For HTTP header, enabling unauthenticated users to execute arbitrary JavaScript in the context of the victim's browser. Such exploitation can lead to session hijacking, data theft, and further unauthorized actions within the affected WordPress installations.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved