Vulnerabilities and Security Researches

PressForward, CVE-2017-12948

CVE, Research URL: CVE-2017-12948
Home page URL: Security reports for PressForward
Application: PressForward
Published on: Aug 18, 2017
Research Description: Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, related to PHP_SELF.
Affected versions: Min -, max 4.3.1.
Status: vulnerable