Monday, January 1, 2018

CVE-2018-3810

Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function ...

from Google Alert - vulnerability http://ift.tt/2qdQLTa
via IFTTT

No comments:

Post a Comment