CVE-2019-9909

Recent Vulnerabilities Research Posts Trends Blog About Contact

383

VMScore

Published: 22/03/2019 Updated: 06/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The "Donation Plugin and Fundraising Platform" plugin prior to 2.3.1 for WordPress has wp-admin/edit.php csv XSS.

Vulnerable Product	Search on Vulmon	Subscribe to Product
givewp givewp

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Tue, Feb 05, 2019 at 04:26:55PM +0100, Tim Coen wrote: MITRE assigned CVE-2019-9909 for this vulnerability - -- Henri Salo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEE/aVSDznAZReWTkxKJ633pE6qdXQFAlyUuv0ACgkQJ633pE6q dXTtjA/+LGkXL5jRpGk+L9ahJQWxAc56hX0cHdDauBpcRI3yAJFCkyWS4OEkrdWh o6z7OikVh ...

CWE-79 https://security-consulting.icu/blog/2019/02/wordpress-give-xss/https://lists.openwall.net/full-disclosure/2019/02/05/9 https://wpvulndb.com/vulnerabilities/9240 http://seclists.org/fulldisclosure/2019/Mar/38 https://nvd.nist.gov http://seclists.org/fulldisclosure/2019/Mar/38

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-9909

Vulnerability Summary

Vulnerability Trend

Mailing Lists

References

Vulmon Search

About

Products

Connect