medium5.4
CVE-2019-19306
The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.
Impact
The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zoho | Lead Magnet | Version 1.6.9.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://cybersecurityworks.com/zerodays/cve-2019-19306-zoho.html
- https://github.com/cybersecurityworks/Disclosed/issues/16
- https://wordpress.org/plugins/zoho-crm-forms/#developers
- https://wpvulndb.com/vulnerabilities/9919
- https://cybersecurityworks.com/zerodays/cve-2019-19306-zoho.html
- https://github.com/cybersecurityworks/Disclosed/issues/16
- https://wordpress.org/plugins/zoho-crm-forms/#developers
- https://wpvulndb.com/vulnerabilities/9919