CVE-2020-8498

XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...

CVE-2020-8498

XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor role to execute arbitrary JavaScript code with the privileges of other users e.g., ones who have t...

CVE-2020-8498

Summary (CVE-2020-8498): A cross-site scripting vulnerability exists in the WordPress GistPress plugin prior to 3.0.2. The flaw is in the shortcode handling (includes/class-gistpress.php, id parameter) that allows an attacker with the WordPress Contributor role to inject and execute JavaScript in...