medium6.1Public exploit code
CVE-2019-6780
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferre…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Wisechat 2.6.3 - Reverse Tabnabbing2019-01-25 · webapps · php
Impact
The Wise Chat plugin before 2.7 for WordPress mishandles external links because rendering/filters/post/WiseChatLinksPostFilter.php omits noopener and noreferrer.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kaine | Wise Chat | before 2.7 |
Weakness classification
References
- NVD record
- CVE.org record
- https://plugins.trac.wordpress.org/changeset/2016929/wise-chat/trunk/src/rendering/filters/post/WiseChatLinksPostFilter.php
- https://wordpress.org/plugins/wise-chat/#developers
- https://www.exploit-db.com/exploits/46247/
- https://plugins.trac.wordpress.org/changeset/2016929/wise-chat/trunk/src/rendering/filters/post/WiseChatLinksPostFilter.php
- https://wordpress.org/plugins/wise-chat/#developers
- https://www.exploit-db.com/exploits/46247/