CVE-2020-8426

Опубликовано: 28 янв. 2020

Источник: nvd

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

The Elementor plugin before 2.8.5 for WordPress suffers from a reflected XSS vulnerability on the elementor-system-info page. These can be exploited by targeting an authenticated user.

Ссылки

https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin
Exploit
Third Party Advisory
https://wordpress.org/plugins/elementor/#developers
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/10051
Third Party Advisory
https://blog.impenetrable.tech/xss-in-wordpress-elementor-plugin
Exploit
Third Party Advisory
https://wordpress.org/plugins/elementor/#developers
Release Notes
Vendor Advisory
https://wpvulndb.com/vulnerabilities/10051
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*

Версия до 2.8.5 (исключая)

EPSS

Процентиль: 63%

0.0045

Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-xfg2-p674-2hcg