CVE-2020-13892

The SportsPress plugin before 2.7.2 for WordPress allows XSS...

CVE-2020-13892

The CVE pertains to the WordPress SportsPress plugin (pre-2.7.2) where an XSS flaw exists due to insufficient validation. Multiple connected sources corroborate: the plugin versions before 2.7.2 are vulnerable to cross-site scripting, with exploitation described as an authenticatedStored XSS in s...