WordPress Paid Memberships Pro Plugin Cross Site Scripting Vulnerability
Publish Date: 15 de września de 2016
Severity: : Medium
DESCRIPTION
A Cross Site Scripting vulnerability was found in the Paid Memberships Pro WordPress Plugin. This vulnerability allows an attacker to perform a actions such as stealing Administrators' session tokens. An attacker has to lure the user into opening a malicious website to exploit this vulnerability.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1000552