CVE-2019-1010207

Genetechsolutions Pie Register 3.0.15 is affected by: Cross Site Scripting (XSS). The impact is: Stealing of session cookies. The component is: File: Login. Parameters: interim-login, wp-lang, and supplied URL. The attack vector is: If a victim clicks a malicious link, the attacker can steal his/her account. The fixed version is: 3.0.16.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.55% chance of exploitation in the next 30 days, 73th percentile

Published

2019-07-23

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://0day.today/exploit/31255

References

• CVE Record
• NVD entry

Related

• CVE-2019-1010193
• CVE-2019-1010209
• CVE-2019-1010178
• CVE-2019-1010241
• CVE-2019-1010174
• CVE-2019-1010252