Description

NOTE: This candidate is a duplicate of CVE-2019-15011. All CVE users should reference CVE-2019-15011 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

Remediation

References

CVE-2019-20417

Related Vulnerabilities

WordPress Plugin Easy Contact Form Builder Cross-Site Scripting (1.0)

CakePHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2006-5031)

WordPress Plugin UnGallery 'search' Parameter Remote Arbitrary Command Execution (2.1.5)

WordPress Plugin Translate Multilingual sites-TranslatePress Cross-Site Scripting (2.0.8)

WordPress Plugin Custom Post View Generator Cross-Site Scripting (0.4.6)

Severity

Medium

Classification

CVE-2019-20417 CWE-601

Tags

Missing Update Known Vulnerabilities