CVE-2019-1010207
Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/her account. The fixed version is: 3.0.16.
- Score
- CVSS 3.0 6.1 Medium
- Status
- Modified - josh@bress.net
- Published
- 2019-07-23
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
References
- https://0day.today/exploit/31255
- https://packetstormsecurity.com/files/149665/wppieregister3015-xss.txt
- https://seclists.org/bugtraq/2018/Oct/16
