CVE Vulnerability

CVE-2020-8799

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.

3.5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 6.8 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

4.8 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://wordpress.org/plugins/wti-like-post/#developers Product Third Party Advisory
https://wpvulndb.com/vulnerabilities/10210 Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:webtechideas:wti_like_post:*:*:*:*:*:wordpress:*:*
Information

Published : 2020-05-05 04:15

Updated : 2020-05-07 07:32

NVD link : CVE-2020-8799

Mitre link : CVE-2020-8799

Products Affected
No products.
CWE
CWE-79