PT-2020-20288
CVE-2020-8799
·
تاريخ النشر
2020-05-05
·
تاريخ التحديث
2020-05-07
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
WTI Like Post plugin versions through 1.4.5 for WordPress
Description
A Stored XSS issue has been found in the administration page of the plugin. Once the administrator has submitted the data, the stored script is executed for all users visiting the website.
Recommendations
For versions through 1.4.5, update to a version that contains a fix for this issue to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾