Beveiligingsadvies

CVE-2018-16255

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-04-12 17:59:02
Laatst bijgewerkt 2024-08-05 10:17:38
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

There is an XSS vulnerability in WP All Import plugin 3.4.9 for WordPress via action=evaluate. NOTE: The vendor states that this is not a vulnerability. WP All Import is only able to be used by a logged in administrator, and the action described can only be taken advantage of by a logged in administrator