Hillstone Networks

'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>

RULE（RULE ID：346344）

Rule General Information


Release Date:		2026-09-23

Rule Name:		WordPress Shortcode Cross-site Scripting Vulnerability (CVE-2019-16219)

Severity:

CVE ID:

Rule Protection Details


Description:		There was a cross-site scripting vulnerability in WordPress versions prior to 5.2.3. This vulnerability stemmed from the lack of proper validation of client-side data in the web application. Attackers could exploit this vulnerability to execute client-side code.

Impact:		An attacker can conduct a cross-site scripting attack to inject malicious client-side scripts into web pages viewed by other users, or to bypass access controls such as the same-origin policy, if affected version is installed.

Affected OS:		Windows, Linux, Others

Reference:		https://fortiguard.com/zeroday/FG-VD-18-165 https://lists.debian.org/debian-lts-announce/2019/10/msg00023.html https://seclists.org/bugtraq/2020/Jan/8 https://wordpress.org/news/2019/09/wordpress-5-2-3-security-and-maintenance-release/ https://wpvulndb.com/vulnerabilities/9864 https://www.debian.org/security/2020/dsa-4599 https://www.debian.org/security/2020/dsa-4677

Solutions

Download the patched versions and above of Wordpress. Patched versions: 5.2.3 and above, reference: https://cn.wordpress.org/download/releases/