Vulnerabilities and Security Researches

OneSignal – Web Push Notifications, CVE-2019-15827

CVE, Research URL: CVE-2019-15827
Home page URL: Security reports for OneSignal – Web Push Notifications
Application: OneSignal – Web Push Notifications
Published on: Aug 30, 2019
Research Description: The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.
Affected versions: max 1.17.8.
Status: vulnerable