CVE-2019-11843: XSS
Published Jun 2, 2020
·Updated
The MailPoet plugin before 3.23.2 for WordPress allows remote attackers to inject arbitrary web script or HTML using extra parameters in the URL (Reflective Server-Side XSS).
Affected Software
2 affected components
MailPoet Mailpoet Wordpress<3.23.2
Automattic Mailpoet Wordpress<3.23.2
Event History
Jun 2, 2020
CVE Published
via MITRE·04:45 PM
Data Sourced
via MITRE·04:45 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-11843?
CVE-2019-11843 is considered to have a high severity due to its ability to allow remote attackers to perform reflective cross-site scripting (XSS) attacks.
2
How do I fix CVE-2019-11843?
To fix CVE-2019-11843, update the MailPoet plugin to version 3.23.2 or later.
3
What versions of MailPoet are affected by CVE-2019-11843?
CVE-2019-11843 affects all versions of MailPoet prior to 3.23.2.
4
What types of attacks can be executed due to CVE-2019-11843?
CVE-2019-11843 allows remote attackers to inject arbitrary web scripts or HTML, leading to potential phishing or malware distribution.
5
Is CVE-2019-11843 specific to certain platforms?
CVE-2019-11843 specifically affects the WordPress platform when using vulnerable versions of the MailPoet plugin.