CVE-2019-11871 - The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins

MEDIUM

The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins

Published May 10, 2019

5.4

MEDIUM

CVSS 3.0

EPSS 0.93%

The Custom Field Suite plugin before 2.5.15 for WordPress has XSS for editors or admins.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://blog.reddy.io/2019/05/30/xss-injection-vulnerability-in-custom-field-suite-wordpress-plugin/		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3531		Advisory
https://wordpress.org/plugins/custom-field-suite/#developers		x_refsource_MISCProductRelease NotesThird Party Advisory
https://wpvulndb.com/vulnerabilities/9273		x_refsource_MISC