CVE-2020-8799

A Stored XSS vulnerability has been found in the administration page of the WTI Like Post plugin through 1.4.5 for WordPress. Once the administrator has submitted the data, the script stored is executed for all the users visiting the website...

CVE-2020-8799

CVE-2020-8799 is a stored XSS in the WordPress plugin WTI Like Post (up to version 1.4.5) . The vulnerability arises from data submitted by an administrator being stored and subsequently executed in visitors’ browsers, enabling script execution for all site users. Documents do not specify a fix v...