cleantalk
Vulnerabilities and Security Researches

Ocean Extra, CVE-2019-16250

CVE, Research URL

CVE-2019-16250

Application

Ocean Extra

Published on
Sep 12, 2019
Research Description
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token sequence.
Affected versions
Min -, max 1.5.9.
Status
vulnerable