CVE-2020-35936

Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted payload in the source parameter via AJAX. The action must be set to post_grid_import_xml_layouts.
Configurations

Configuration 1

cpe:2.3:a:pickplugins:team_showcase:*:*:*:*:*:wordpress:*:*
cpe:2.3:a:pickplugins:post_grid:*:*:*:*:*:wordpress:*:*

Information

Published : 2021-01-01 02:15

Updated : 2021-01-11 09:38


NVD link : CVE-2020-35936

Mitre link : CVE-2020-35936

Products Affected
CWE