CVE-2019-13463
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin before 7.3.5 for WordPress allows remote attackers to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term->name" statement.
We have discovered 4 live websites that are affected by CVE-2019-13463.
Affected Software
| Product |  Simple Link Directory |
| Category | Wordpress Plugins |
| Vulnerable Domains | 4 live websites (100% of Simple Link Directory install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 1 versions ( 100% of all versions) |
Details
- Published - Mar 20, 2020
- Updated - Aug 4, 2024
CVE References
Website Distribution by Country
Number of websites using CVE-2019-13463 United States | 3 websites |
 India | 1 websites |
Website Distribution by TLD
Number of websites using CVE-2019-13463| .com | 3 websites |
| .nl | 1 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redWebsites affected by CVE-2019-13463
Top websites that are affected by CVE-2019-13463. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***********.nl | United States | *,***,*** | |
| **********.com | United States | **,***,*** | |
| ************.com | India | **,***,*** | |
| *******************.com | United States | **,***,*** |
FAQ
A total of 4 websites have been identified as vulnerable to CVE-2019-13463, based on global website indexing conducted by WebTechSurvey.
The Simple Link Directory is affected by the CVE-2019-13463 vulnerability.
Simple Link Directory versions up to and including 7.3.5 are vulnerable to CVE-2019-13463.