Lucene search
WpvulndbWPVDB-ID:65B9A54E-9BC7-4AA3-91A6-010F18896DBAHistoryAug 31, 2020 - 12:00 a.m.
WP Floating Menu < 1.4.1 - Authenticated Reflected Cross-Site Scripting
2020-08-3100:00:00
wpscan.com
9
EPSS
0.001
Percentile
37.3%
The id GET parameter used by WP Floating menu does not correctly sanitise user input before reflecting the parameter back to the user, resulting in a reflected XSS vulnerability. Other sanitisation have been added to prevent other XSS issues as well as potential SQL injections.
PoC
/wp-admin/admin.php?page=wpfm-admin&action;=wpfm-edit-menu&id;=1">
Related
wpexploit
wpexploit
WP Floating Menu < 1.4.1 - Authenticated Reflected Cross-Site Scripting
2020-08-31 00:00:00
nvd
nvd
CVE-2020-25378
2020-09-14 16:15:11
cvelist
cvelist
CVE-2020-25378
2020-09-14 15:25:12
cve
cve
CVE-2020-25378
2020-09-14 16:15:11
prion
prion
Cross site scripting
2020-09-14 16:15:00