Lucene search
Cary HooperPATCHSTACK:7E17CF117EB4529CF676864DA4254F29HistoryDec 04, 2019 - 12:00 a.m.
WordPress CSS Hero plugin <= 4.03 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability
2019-12-0400:00:00
Cary Hooper
patchstack.com
15
EPSS
0.015
Percentile
87.1%
Authenticated Reflected Cross-Site Scripting (XSS) vulnerability found by Cary Hooper in WordPress CSS Hero plugin (versions <= 4.03).
Solution
Update the WordPress CSS Hero plugin to the latest available version (at least 4.07).
References
Related
cve
cve
CVE-2019-19133
2019-12-04 19:15:11
packetstorm
packetstorm
WordPress CSS Hero 4.0.3 Cross Site Scripting
2019-12-04 00:00:00
nvd
nvd
CVE-2019-19133
2019-12-04 19:15:11
prion
prion
Input validation
2019-12-04 19:15:00
wpvulndb
wpvulndb
CSS Hero < 4.07 - Authenticated Reflected XSS
2019-12-02 00:00:00
cvelist
cvelist
CVE-2019-19133
2019-12-04 18:55:14