CVE-2019-19306 – Zoho CRM Lead Magnet <= 1.6.9.1 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2019-19306

The Zoho CRM Lead Magnet plugin 1.6.9.1 for WordPress allows XSS via module, EditShortcode, or LayoutName. El plugin Zoho CRM Lead Magnet versión 1.6.9.1 para WordPress, permite XSS por medio del módulo, EditShortcode o LayoutName. • https://cybersecurityworks.com/zerodays/cve-2019-19306-zoho.html https://github.com/cybersecurityworks/Disclosed/issues/16 https://wordpress.org/plugins/zoho-crm-forms/#developers https://wpvulndb.com/vulnerabilities/9919 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •