CVE-2019-17207 - A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress

Back Back to CVE browser

MEDIUM

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress

Published Oct 18, 2019

5.4

MEDIUM

CVSS 3.1

EPSS 1.65%

Description

A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. This allows unauthorized users to inject client-side JavaScript into an admin-only WordPress page via the wp-admin/tools.php?page=view-broken-links s_filter parameter in a search action.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

http://packetstormsecurity.com/files/154875/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2019/Oct/31
mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory
https://wordpress.org/plugins/broken-link-checker/#developers
x_refsource_MISCProduct
https://wpvulndb.com/vulnerabilities/9917
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/154875/WordPress-Broken-Link-Checker-1.11.8-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2019/Oct/31		mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory
https://wordpress.org/plugins/broken-link-checker/#developers		x_refsource_MISCProduct
https://wpvulndb.com/vulnerabilities/9917		x_refsource_MISCExploitThird Party Advisory