CVE-2019-17207

Published: 18/10/2019 Updated: 21/10/2019

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.

Vulnerable Product	Search on Vulmon	Subscribe to Product
managewp broken link checker

WordPress Broken Link Check plugin version 1118 suffers from a cross site scripting vulnerability ...

Document Title =============== Reflected XSS via `Broken Link Checker` v1118 WordPress plugin Product Description =============== Broken Link Checker will monitor your blog looking for broken links and let you know if any are found Homepage: managewpcom/ WordPress Plugin: wordpressorg/plugins/broken-link-checker/ PoC ===== ...

CWE-79 https://wordpress.org/plugins/broken-link-checker/#developers http://packetstormsecurity.com/files/154875/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.html https://wpvulndb.com/vulnerabilities/9917 http://seclists.org/fulldisclosure/2019/Oct/31 https://nvd.nist.gov http://seclists.org/fulldisclosure/2019/Oct/31

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-17207

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect