CVE-2020-14207

概要

参考情報

• wordpress.org/plugins/divebook · Release Notes
• hooperlabs.xyz/disclosures/divebook.php · Third Party Advisory

divebook のその他の脆弱性

• CVE-2020-14206中 6.1The DiveBook plugin 1.1.4 for WordPress is prone to unauthenticated XSS within the filter function (via an arbitrary parameter).
• CVE-2020-14205中 5.3The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization c…