Re: Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin)

[Henri Salo <henri () nerv fi>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Tue, Feb 05, 2019 at 04:19:16PM +0100, Tim Coen wrote:
> https://security-consulting.icu/blog/2019/02/wordpress-forminator-persistent-xss-blind-sql-injection/

Please use CVE-2019-9567 for XSS vulnerability and CVE-2019-9568 for
SQL-injection vulnerability.

- -- 
Henri Salo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE/aVSDznAZReWTkxKJ633pE6qdXQFAlx9zwAACgkQJ633pE6q
dXScdQ/+NVNYUW7vnrffGyXzEN1sL/A+R+VUGbAoLTSE/Dex6U0eur+0QviumgwY
r77Z4BANUCzO6YXckNRVkQiQB4fD/P5IKwQlrsepaEija2ez6fizCLMHJxlevGMa
cWex/Lv0iGZkggt0q+gdmRDV4fy/ZyjgEndQxFIqGdIYHHcPGdBdFnQw2aJDLomD
bVm0+z/NmX8xigHvdBjEC7CKGcYyrZl+vCMXhMkraeurZI5WvrLgmpG4XhGAnLdX
nlo3bLjNBmfJJXZbJ3MO64VMkJFZ7UYHaTZNsPjreyocCamZMfh7VWp7OTneLWsj
8JrGbcWyYJp9vVJkWfTzJMA2umXIxdW7qpdw4fABVSxHjX3W6fn8aqNVxnugWU2F
GD0ocufE0RjQ9Y7DWnZG5ZkTnSMwmNt6b+rHr6r9qciO12WeAEyabYzdOaLI1WYc
sa/At6NWvr4NuMBpqNjU0xb0QMhquFSvt7Ba51oC/vL0+vrUvpF8Mvg21VkoeaIl
9AWDQyuvLPNKYRbI0mz7KkXHWYk2rNhkjclWyCGKIyLYI4DwkMJlzVVcSAJzAqBG
XpXPWpnD0+qj3pM7AIx+j2SgXd2+kfq75P59wOf8vR+MfW2krK+nLLTglLnRD+9t
UKJNKxtSvgDn3evzwu5OdZklkCdsG9YM2m8D2l6RTzHaIiVcaOs=
=Xxee
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/