Lucene search
MitreCVELIST:CVE-2020-28650HistoryNov 16, 2020 - 2:49 a.m.
CVE-2020-28650
2020-11-1602:49:50
mitre
www.cve.org
6.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
The WPBakery plugin before 6.4.1 for WordPress allows XSS because it calls kses_remove_filters to disable the standard WordPress XSS protection mechanism for the Author and Contributor roles.
Related
wpvulndb
wpvulndb
prion
prion
Design/Logic Flaw
2020-11-16 04:15:00
nvd
nvd
CVE-2020-28650
2020-11-16 04:15:12
cve
cve
CVE-2020-28650
2020-11-16 04:15:12
patchstack
patchstack
wpexploit
wpexploit
6.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
25.0%
Related for CVELIST:CVE-2020-28650