2 matches found
Cross site scripting
Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal subscriber-level permissions to save arbitrary JavaScript in the plugin's settings panel via the idxupdaterecaptchakey AJAX action and a crafted idxrecaptchasitekey parameter, which...
3.5CVSS5.1AI score0.00723EPSS
SaveExploits1References2Affected Software1
CVE-2020-11512: Improper Neutralization of Input During Web Page Generation
Stored XSS in the IMPress for IDX Broker WordPress plugin before 2.6.2 allows authenticated attackers with minimal subscriber-level permissions to save arbitrary JavaScript in the plugin's settings panel via the idxupdaterecaptchakey AJAX action and a crafted idxrecaptchasitekey parameter, which...
5.4CVSS6AI score0.00723EPSS
SaveExploits1References2
20