onyx --cves cve-2019-17672
CVE-2019-17672
- score
- <0.1
- cvss
- 6.1
- epss
- 1.8%
- published
- 2019-10-17
- kev added
- —
- first seen
WordPress before 5.2.4 contains a stored XSS caused by injection of JavaScript into STYLE elements, letting attackers execute arbitrary scripts in the context of the affected site, exploit requires storing malicious content.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 6
- https://www.debian.org/security/2020/dsa-4677
- https://wordpress.org/news/2019/10/wordpress-5-2-4-security-release/
- https://blog.wpscan.org/wordpress/security/release/2019/10/15/wordpress-524-security-release-breakdown.html
- https://seclists.org/bugtraq/2020/Jan/8
- https://wpvulndb.com/vulnerabilities/9910
- https://www.debian.org/security/2020/dsa-4599