← All advisories

Unrated severityNVD Advisory· Published Aug 30, 2019· Updated Aug 5, 2024

CVE-2019-15827

CVE-2019-15827

Description

The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/onesignal-free-web-push-notifications plugindescription
WordPress/Onesignal Free Web Push Notificationsllm-fuzzy
Range: <1.17.8
Package: https://wordpress.org/plugins/onesignal-free-web-push-notifications

Patches

Vulnerability mechanics

References

3

wordpress.org/plugins/onesignal-free-web-push-notifications/mitrex_refsource_MISC
wpvulndb.com/vulnerabilities/9478mitrex_refsource_MISC
www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5530.phpmitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.