Unscored CVE-2019-6029 EUVD-2019-15597GHSA-4fm5-m9f3-gmwm

Cross-site scripting vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to inject arbitrary web script or HTML vi…

Published Dec 26, 2019 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Andrei Lupu Product: Custom Body Class

Description

Cross-site scripting vulnerability in Custom Body Class 0.6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Andrei Lupu	Custom Body Class	0.6.0 and earlier	—

References

https://wordpress.org/plugins/wp-custom-body-class/
http://jvn.jp/en/jp/JVN26847507/index.html