Lucene search
GoogleOSV:CVE-2020-8498HistoryJan 30, 2020 - 11:15 p.m.
CVE-2020-8498
2020-01-3023:15:10
Google
osv.dev
4
XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users (e.g., ones who have the publish_posts capability).
Related
cve
cve
CVE-2020-8498
2020-01-30 23:15:10
wpvulndb
wpvulndb
GistPress < 3.0.2 - Authenticated Stored XSS
2020-01-31 00:00:00
nvd
nvd
CVE-2020-8498
2020-01-30 23:15:10
patchstack
patchstack
prion
prion
Cross site scripting
2020-01-30 23:15:00
cvelist
cvelist
CVE-2020-8498
2020-01-30 22:52:15