CVE-2019-16525

PoC —

CVSS 3.1

6.1 medium

EPSS

6%p92

Published

Sep 19, 2019 (Sep 19, 2019)

Modified

Jun 17, 2026

Description

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code.

Vendors: checklist
Products: checklist
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (5.5%)

In the news0 stories

No ingested article mentions this CVE yet.