Lucene search
PRIOn knowledge basePRION:CVE-2020-11509HistoryApr 07, 2020 - 7:15 p.m.
Cross site scripting
2020-04-0719:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
48.4%
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will execute in an administrator’s browser if the template is used to create a page).
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_lead_plus_x | le | 0.98 |
Related
wpexploit
wpexploit
WP Lead Plus X < 0.99 - Unauthenticated Stored Cross-Site Scripting (XSS)
2020-04-07 00:00:00
cvelist
cvelist
CVE-2020-11509
2020-04-07 18:48:43
cve
cve
CVE-2020-11509
2020-04-07 19:15:13
wpvulndb
wpvulndb
WP Lead Plus X < 0.99 - Unauthenticated Stored Cross-Site Scripting (XSS)
2020-04-07 00:00:00
patchstack
patchstack
nvd
nvd
CVE-2020-11509
2020-04-07 19:15:13