CVE-2019-20141

CVE-2019-20141 affects WordPress with the Laborator Neon theme 2.0. The issue is a cross-site scripting (XSS) vulnerability via the data/autosuggest-remote.php q parameter. Exploitation details are not provided in the documents beyond the XSS description; user interaction is often required per CV...

CVE-2020-13890

The CVE-2020-13890 entry concerns Neon theme 2.0 for Bootstrap, prior to 2020-06-03. The vulnerability is an XSS flaw in the dashboard Add Task Input operation, caused by insufficient validation of client-side data. Reported sources (NVD, CNVD, Red Hat advisory) describe the same issue and identi...

CVE-2020-23576

Laborator Neon dashboard v3 is affected by a stored XSS via the chat tab. The CVE-2020-23576 entry documents a stored cross-site scripting vulnerability in Laborator Neon dashboard v3, with CVSS v2 base score 3.5 (LOW) and CVSS v3.1 base score 5.4 (MEDIUM). The provided sources do not specify aff...