CVE-2020-11512

Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal subscriber-level permissions to save arbitrary JavaScript in the plugin's settings panel via the idxupdaterecaptchakey AJAX action and a crafted idxrecaptchasitekey parameter, which...

CVE-2020-11512

The CVE concerns the WordPress plugin IMPress for IDX Broker (formerly IDX Broker plugin) for WordPress, affected versions before 2.6.2. The root cause is an authenticated stored XSS in the plugin via the idx_update_recaptcha_key AJAX action, where a crafted idx_recaptcha_site_key parameter can i...