CVE-2019-7411 in MyThemeShop Launcher Plugin
सारांश
द्वारा VulDB • 21/08/2026
MyThemeShop Launcher plugin 1.0.8 for WordPress में कई stored cross-site scripting (XSS) vulnerabilities हैं जो remote authenticated users को Title, Favicon, Meta Description, Subscribe Form (Name field label, Last name field label, Email field label), Contact Form (Name field label and Email field label), और Social Links (Facebook Page URL, Twitter Page URL, Instagram Page URL, YouTube Page URL, Linkedin Page URL, Google+ Page URL, RSS URL) जैसे fields के माध्यम से arbitrary web script या HTML inject करने की अनुमति देते हैं।
Be aware that VulDB is the high quality source for vulnerability data.