PT-2020-20288
CVE-2020-8799
·
Published
2020-05-05
·
Updated
2020-05-07
Description by
CVSS 3.1
4.8
MediumMetricsAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
WTI Like Post plugin versions through 1.4.5 for WordPress
Description
A Stored XSS issue has been found in the administration page of the plugin. Once the administrator has submitted the data, the stored script is executed for all users visiting the website.
Recommendations
For versions through 1.4.5, update to a version that contains a fix for this issue to prevent exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾