plugin

Css Hero Vulnerabilities

1 known security issue reported for the Css Hero WordPress plugin. Most recent disclosed Dec 2, 2019.

1 medium

Running Css Hero on your site? Check whether your installed version is affected.

CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting

medium

The CSS Hero plugin through 4.0.3 for WordPress is prone to reflected XSS via the URI in a csshero_action=edit_page request because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary JavaScript in the browser of an unsuspecting user in the context of the affe...

CVSS:: 6.1
Affected:: up to 4.03
Fixed in:: 4.07
Disclosed:: Dec 2, 2019

CVE-2019-19133 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database