CVE-2019-11871

概要

参考情報

• blog.reddy.io/2019/05/30/xss-injection-vulnerability-in-custom-field-suite-wordpress-plugin
• wordpress.org/plugins/custom-field-suite · Product
• wpvulndb.com/vulnerabilities/9273

custom field suite のその他の脆弱性

• CVE-2024-3562高 8.8The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.6.7 via the Loop cus…
• CVE-2024-3561高 8.8The Custom Field Suite plugin for WordPress is vulnerable to SQL Injection via the the 'Term' custom field in all versions up to, and includ…
• CVE-2024-3558中 5.4The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_title]' parameter versions up…
• CVE-2024-3559中 5.4The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the 'cfs[post_content]' parameter versions …
• CVE-2024-3068中 4.8The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cfs[fields][*][name]' parameter in all ver…