CVE-2020-36510

The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cbsa AJAX action, leading to a Reflected Cross-Site Scripting...

CVE-2020-36510

CVE-2020-36510 – WordPress 15Zine < 3.3.0 The 15Zine WordPress theme prior to version 3.3.0 fails to sanitize/escape the cbi parameter when echoing it back in the HTTP response via the cb_s_a AJAX action, causing a reflected Cross-Site Scripting (XSS) vulnerability. Affected product: WordPress...