{"id":7815,"date":"2019-07-06T20:33:16","date_gmt":"2019-07-07T03:33:16","guid":{"rendered":"https:\/\/webdev.securin.xyz\/?post_type=zerodays&#038;p=7815"},"modified":"2023-02-06T10:29:41","modified_gmt":"2023-02-06T17:29:41","slug":"cve-2019-20438-wso2","status":"publish","type":"zerodays","link":"https:\/\/10.42.32.162\/zerodays\/cve-2019-20438-wso2\/","title":{"rendered":"CVE-2019-20438 &#8211; Stored Cross-Site Scripting in WSO2"},"content":{"rendered":"<p>A vulnerability was discovered on WSO2 API Manager 2.6.0 in the inline API documentation editor page of the API Publisher. A stored cross-site script (XSS) vulnerability allows an attacker to inject malicious code into the inline API documentation editor page of the API Publisher when the user uses XSS payload in the code view.<\/p>\n","protected":false},"featured_media":7776,"parent":0,"menu_order":0,"template":"","meta":{"content-type":""},"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/zerodays\/7815"}],"collection":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/zerodays"}],"about":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/types\/zerodays"}],"version-history":[{"count":6,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/zerodays\/7815\/revisions"}],"predecessor-version":[{"id":13652,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/zerodays\/7815\/revisions\/13652"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media\/7776"}],"wp:attachment":[{"href":"https:\/\/10.42.32.162\/wp-json\/wp\/v2\/media?parent=7815"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}