CVE-2020-36510

Name of the Vulnerable Software and Affected Versions 15Zine WordPress theme versions prior to 3.3.0

Description The issue concerns a Reflected Cross-Site Scripting problem. It arises because the cbi parameter is not properly sanitised and escaped before being output in the response via the cb s a AJAX action.

Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the cb s a AJAX action until the update is applied. Avoid using the cbi parameter in the affected AJAX endpoint until the issue is resolved.