CVE-2019-16289 - The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter

MEDIUM

The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter

Published Sep 13, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 1.03%

The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7087		Advisory
https://generaleg0x01.com/2019/09/13/xss-woody/		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/insert-php/#developers		x_refsource_MISCRelease Notes
https://wpvulndb.com/vulnerabilities/9880		x_refsource_MISCThird Party Advisory