CVE-2019-15777

CVE-2019-15777 is a medium-severity Cross-Site Scripting (XSS) vulnerability affecting the shapepress-dsgvo plugin for WordPress, specifically versions prior to 2.2.19. An authenticated attacker with low privileges could exploit this vulnerability by injecting malicious scripts via the admin_email parameter in the admin-ajax.php endpoint. While the attack complexity is low, successful exploitation could lead to limited impact on confidentiality and integrity, such as session hijacking or defacement. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.