Lucene search
PRIOn knowledge basePRION:CVE-2020-35933HistoryJan 01, 2021 - 2:15 a.m.
Cross site scripting
2021-01-0102:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
32.3%
A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX request containing either JavaScript in an options parameter, or a base64-encoded JSON string containing JavaScript in the encoded_options parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| newsletter | lt | 6.8.2 |
Related
wpvulndb
wpvulndb
Newsletter < 6.8.2 - Authenticated Cross-Site Scripting (XSS)
2020-08-03 00:00:00
nvd
nvd
CVE-2020-35933
2021-01-01 02:15:13
cvelist
cvelist
CVE-2020-35933
2021-01-01 01:24:35
patchstack
patchstack
cve
cve
CVE-2020-35933
2021-01-01 02:15:13
openvas
openvas
WordPress Newsletter Plugin < 6.8.2 Multiple Vulnerabilities
2020-08-04 00:00:00