What is CVE-2019-7411?

CVE-2019-7411 is a medium-severity vulnerability in Mythemeshop Launcher, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-05-13.

How severe is CVE-2019-7411?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2019-7411 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Mythemeshop Launcher

CVE-2019-7411

Multiple stored cross-site scripting (XSS) in the MyThemeShop Launcher plugin 1.0.8 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via fields as follows: (1) Title, (2) Favicon, (3) Meta Description, (4) Subscribe Form (Name field label, Last name field label, Email field label), (5) Contact Form (Name field label and Email field label), and (6) Social Links (Facebook Page URL, Twitter Page URL, Instagram Page URL, YouTube Page URL, Linkedin Page URL, Google+ Page URL, RSS URL).

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.009 (56.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Mythemeshop Launcher — versions 1.0.8
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

20142995/nuclei-templates

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-7411?: CVE-2019-7411 is a medium-severity vulnerability in Mythemeshop Launcher, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2019-05-13.
How severe is CVE-2019-7411?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2019-7411 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.