Lucene search
PRIOn knowledge basePRION:CVE-2020-24314HistoryAug 26, 2020 - 1:15 p.m.
Cross site scripting
2020-08-2613:15:00
PRIOn knowledge base
www.prio-n.com
7
0.001 Low
EPSS
Percentile
32.7%
Fahad Mahmood RSS Feed Widget Plugin v2.7.9 and lower does not sanitize the value of the “t” GET parameter before echoing it back out inside an input tag. This results in a reflected XSS vulnerability that attackers can exploit with a specially crafted URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rss_feed_widget | le | 2.7.9 |
Related
cvelist
cvelist
CVE-2020-24314
2020-08-26 12:59:49
wpvulndb
wpvulndb
RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)
2020-08-10 00:00:00
wpexploit
wpexploit
RSS Feed Widget < 2.8.1 - Authenticated Cross-Site Scripting (XSS)
2020-08-10 00:00:00
cve
cve
CVE-2020-24314
2020-08-26 13:15:10
nvd
nvd
CVE-2020-24314
2020-08-26 13:15:10