medium6.1
CVE-2019-16525
An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress.
Impact
An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checklist | Checklist | before 1.1.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/154436/WordPress-Checklist-1.1.5-Cross-Site-Scripting.html
- https://plugins.trac.wordpress.org/changeset/2155029/
- https://wordpress.org/plugins/checklist/#developers
- https://wpvulndb.com/vulnerabilities/9877
- https://packetstormsecurity.com/files/154436/WordPress-Checklist-1.1.5-Cross-Site-Scripting.html
- https://plugins.trac.wordpress.org/changeset/2155029/
- https://wordpress.org/plugins/checklist/#developers
- https://wpvulndb.com/vulnerabilities/9877