full-disclosure - Re: [FD] Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin)

Open Source and information security mailing list archives

Message-ID: <20190305012104.x6fawt77l6l4ehqw@tunkki.bugs.fi>
Date: Tue, 5 Mar 2019 03:21:04 +0200
From: Henri Salo <henri@...v.fi>
To: Tim Coen <tc.coen@...il.com>
Cc: fulldisclosure@...lists.org
Subject: Re: [FD] Forminator 1.5.4 - Unauthenticated Persistent XSS,
 Blind SQL Injection (WordPress Plugin)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Feb 05, 2019 at 04:19:16PM +0100, Tim Coen wrote:
> https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/

Please use CVE-2019-9567 for XSS vulnerability and CVE-2019-9568 for
SQL-injection vulnerability.

- -- 
Henri Salo
-----BEGIN PGP SIGNATURE-----
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=Xxee
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives