漏洞描述
WordPress Social Warfare plugin before 3.5.3 contains a cross-site scripting vulnerability via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, affecting Social Warfare and Social Warfare Pro.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/mpgn/CVE-2019-9978↗www.pluginvulnerabilities.comhttps://www.pluginvulnerabilities.com/2019/03/21/full-disclosure-of-settings-change-persistent-cross-site-scripting-xss-vulnerability-in-social-warfare/↗www.cybersecurity-help.czhttps://www.cybersecurity-help.cz/vdb/SB2019032105↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2019-9978↗