Test Kennung:	1.3.6.1.4.1.25623.1.0.113537
Kategorie:	Web application abuses
Titel:	WordPress Visualizer Plugin < 3.3.1 Multiple Vulnerabilities
Zusammenfassung:	The WordPress plugin Visualizer is prone to multiple vulnerabilities.
Beschreibung:	Summary: The WordPress plugin Visualizer is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - A server-side request forgery (SSEF) vulnerability exists within wp-json/visualizer/v1/upload-data. - A stored cross-site scripting (XSS) vulnerability exists within the admin dashboard. This occurs because classes/Visualizer/Gutenberg/Block.php registers wp-json/visualizer/v1/update-chart with no access control, and classes/Visualizer/Render/Page/Data.php lacks output sanitization. Vulnerability Impact: Successful exploitation would allow an attacker to read and modify sensitive information or inject arbitrary HTML and JavaScript into the site. Affected Software/OS: WordPress Visualizer plugin through version 3.3.0. Solution: Update to version 3.3.1. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-16931 Common Vulnerability Exposure (CVE) ID: CVE-2019-16932
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.