← Back

Api Bearer Auth Project

api_bearer_auth_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Api Bearer Auth Project
1Api Bearer Auth
Jun 17, 2026
Sep 15, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.