CVE-2019-19110

The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2020-06-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Wpforo (Gvectors)

References

• https://twitter.com/Sh0ckFR/status/1257298443527053313