CVE-2019-15870

CVE-2019-15870 affects the WordPress CarSpot theme prior to 2.1.7. The vulnerability is a stored XSS in the Phone Number field, enabling injected client-side script. Affected: CarSpot WordPress theme versions before 2.1.7 (summary appears in NVD, Red Hat advisories, CNVD, CVE/CVEList entries, and...