CVE-2019-19111: XSS
The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19111?
CVE-2019-19111 is a vulnerability found in the wpForo plugin 1.6.5 for WordPress that allows for cross-site scripting (XSS) attacks.
How does the wpForo plugin 1.6.5 vulnerability occur?
The vulnerability occurs when the wp-admin/admin.php?page=wpforo-phrases langid parameter is not properly sanitized and allows malicious code to be injected.
What is the severity of CVE-2019-19111?
CVE-2019-19111 has a severity rating of 6.1, which is considered medium.
How can I fix the wpForo plugin 1.6.5 vulnerability?
To fix the vulnerability, it is recommended to update the wpForo plugin to the latest version or apply any patches provided by the plugin developer.
Where can I find more information about CVE-2019-19111?
You can find more information about CVE-2019-19111 on the following reference: [Twitter post](https://twitter.com/Sh0ckFR/status/1257298443527053313).