3 matches found
CVE-2020-7107
The WordPress plugin Ultimate FAQ (WordPress plugin) prior to version 1.8.30 is vulnerable to Cross-Site Scripting (XSS) via the Display_FAQ parameter routed through Shortcodes/DisplayFAQs.php. The issue stems from insufficient sanitization of the Display_FAQ GET parameter, enabling an attacker t...
6.1CVSS6.4AI score0.02195EPSS
SaveExploits1References3Affected Software1
CVE-2020-7107
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php...
6.1AI score0.02195EPSS
SaveExploits1References3
CVE-2020-7107: Improper Neutralization of Input During Web Page Generation
The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php...
6.1CVSS6.4AI score0.02195EPSS
SaveExploits1References2
20