onesignal-free-web-push-notifications Plugin up to 1.17.7 on WordPress subdomain cross site scripting

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in onesignal-free-web-push-notifications Plugin up to 1.17.7 on WordPress (WordPress Plugin). It has been classified as problematic. This affects some unknown functionality. Upgrading to version 1.17.8 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
9331896	08/10/2020	VulD...	cve_nvd_summary	The onesignal-free-web-push-notifications plugin before 1.17.8 for WordPress has XSS via the subdomain parameter.	mitre.org	08/10/2020	accepted	100
9331895	08/10/2020	VulD...	cve_assigned	1567036800	mitre.org	08/10/2020	accepted	100
9331868	08/10/2020	VulD...	cwe	79 (cross site scripting)		08/10/2020	accepted	100
9331863	08/10/2020	VulD...	type	WordPress Plugin		08/10/2020	accepted	100
9331902	08/31/2019	VulD...	cvss3_vuldb_rc	X		08/31/2019	accepted	90
9331901	08/31/2019	VulD...	cvss3_vuldb_rl	O		08/31/2019	accepted	90
9331900	08/31/2019	VulD...	cvss3_vuldb_e	X		08/31/2019	accepted	90
9331899	08/31/2019	VulD...	cvss2_vuldb_rc	ND		08/31/2019	accepted	90
9331898	08/31/2019	VulD...	cvss2_vuldb_rl	OF		08/31/2019	accepted	90
9331897	08/31/2019	VulD...	cvss2_vuldb_e	ND		08/31/2019	accepted	90
9331894	08/31/2019	VulD...	cve	CVE-2019-15827	mitre.org	08/31/2019	accepted	100
9331893	08/31/2019	VulD...	upgrade_version	1.17.8		08/31/2019	accepted	100
9331892	08/31/2019	VulD...	name	Upgrade		08/31/2019	accepted	100
9331891	08/31/2019	VulD...	price_0day	$0-$5k	see documentation	08/31/2019	accepted	100
9331890	08/31/2019	VulD...	date	1567123200 (08/30/2019)		08/31/2019	accepted	100
9331889	08/31/2019	VulD...	cvss3_vuldb_a	N		08/31/2019	accepted	100
9331888	08/31/2019	VulD...	cvss3_vuldb_i	L		08/31/2019	accepted	100
9331887	08/31/2019	VulD...	cvss3_vuldb_c	N		08/31/2019	accepted	100
9331886	08/31/2019	VulD...	cvss3_vuldb_s	U		08/31/2019	accepted	100
9331885	08/31/2019	VulD...	cvss3_vuldb_ui	R		08/31/2019	accepted	100