XSS in Webtechideas Wti Like Post
CVE-2020-8799
A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.007 (50.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.
Affected products
- Webtechideas Wti_like_post
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Product, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-8799?
- CVE-2020-8799 is a medium-severity vulnerability in Webtechideas Wti Like Post, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2020-05-05.
- How severe is CVE-2020-8799?
- Medium severity. CVSS v3 base score is 4.8 out of 10.
- Is CVE-2020-8799 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.