CVE-2019-16332
Public Exploits 1
Nuclei · 1 CVE-2019-16332.yaml [template]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-16332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
WordPress api-bearer-auth插件跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。api-bearer-auth是使用在其中的一个REST API的身份验证插件。 WordPress api-bearer-auth插件20190907之前版本中存在跨站脚本漏洞，该漏洞源于程序没有过滤‘server’参数。远程攻击者可利用该漏洞注入Javascript代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2019-16332
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | WordPress API Bearer Auth plugin before 20190907 contains a cross-site scripting vulnerability. The server parameter is not correctly filtered in swagger-config.yaml.php. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16332.yaml | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-16332
请登录查看更多情报信息。
Patches & Fixes for CVE-2019-16332 (1)
- https://plugins.trac.wordpress.org/changeset/2152730x_refsource_MISC
Exploits & Public PoCs for CVE-2019-16332 (1)
Other References for CVE-2019-16332 (1)
- https://wpvulndb.com/vulnerabilities/9868x_refsource_MISC
Same Patch Batch · n/a · 2019-09-15 · 8 CVEs total
| CVE-2019-16335 | FasterXML jackson-databind 代码问题漏洞 | |
| CVE-2019-14540 | FasterXML jackson-databind 代码问题漏洞 | |
| CVE-2019-16333 | GetSimple CMS 跨站脚本漏洞 | |
| CVE-2019-16334 | Bludit 跨站脚本漏洞 | |
| CVE-2019-16320 | Cobham Sea Tel 信息泄露漏洞 | |
| CVE-2019-16321 | Sensorweb ScadaBR 跨站脚本漏洞 | |
| CVE-2019-16319 | Wireshark Gryphon dissector 资源管理错误漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2024-14046
OpenBoxes Document Upload Controller DocumentController.groo - CVE-2024-14045
OpenBoxes Product Supplier Edit Controller RoleInterceptor.g - CVE-2026-19986
Adblock for Youtube Extension Event Listener contentscript.j - CVE-2026-19965
automad Password Reset Endpoint UserController.php requestPa - CVE-2026-51346
StudIP 6.0.3前/5.4.12前SQL注入漏洞
V. Comments for CVE-2019-16332
No comments yet