Description

ProjectSend before r1070 writes user passwords to the server logs.

Remediation

References

CVE-2019-11492

Related Vulnerabilities

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.1.6)

SharePoint CVE-2017-0281 Vulnerability (CVE-2017-0281)

WordPress Plugin YITH WooCommerce Multi Vendor Cross-Site Scripting (3.8.0)

LiteSpeed Web Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-4871)

WordPress Plugin Integration of Moneybird for WooCommerce Cross-Site Scripting (2.1.1)

Severity

High

Classification

CVE-2019-11492 CWE-532

Tags

Missing Update Known Vulnerabilities