Description

In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.

Remediation

References

CVE-2019-17671

Related Vulnerabilities

WordPress Plugin WP Database Backup Cross-Site Scripting (5.1.1)

Envoy Proxy Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2019-18836)

WordPress Plugin Qwizcards-online quizzes and flashcards Cross-Site Scripting (3.61)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43715)

OpenSSL Improper Access Control Vulnerability (CVE-2016-7054)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-200 CVE-2019-17671